Product by Calibre

    Calibre

    20 known vulnerabilities in Calibre (Calibre), 0 of them actively exploited (CISA KEV).

    Key figures

    20

    Vulnerabilities

    0

    Actively exploited (KEV)

    0

    Used by ransomware

    4

    Critical

    Vulnerabilities

    Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.

    Vulnerabilities in Calibre (Calibre)
    HighCVE-2024-6781

    Calibre Arbitrary File Read

    also in 1 other product

    		7.5
    MediumCVE-2024-7008

    Calibre Reflected Cross-Site Scripting (XSS)

    also in 1 other product

    		5.4
    HighCVE-2021-44686

    Calibre E-book Calibre: Denial of Service

    also in 1 other product

    		7.5
    HighCVE-2018-7889

    Calibre E-book Calibre: Code Execution

    		7.8
    CriticalCVE-2011-4124

    Calibre E-book Calibre: Improper Input Validation

    		9.8
    CriticalCVE-2011-4125

    Calibre E-book Calibre: Untrusted Search Path

    		9.8
    HighCVE-2024-7009

    Calibre SQL Injection

    also in 1 other product

    		4.2
    CriticalCVE-2026-26064

    calibre: Path Traversal Vulnerability Enables Arbitrary File Write and Remote Code Execution

    also in 2 other products

    		8.8
    HighCVE-2023-46303

    Calibre E-book Calibre: security vulnerability

    		7.5
    MediumCVE-2016-10187

    Calibre E-book Calibre: security vulnerability

    		5.5
    HighCVE-2011-4126

    Calibre E-book Calibre: Time-of-check Time-of-use (TOCTOU) Race Condition

    		8.1
    CriticalCVE-2026-26065

    calibre: Path Traversal can Lead to Arbitrary File Write and Potential Code Execution

    also in 2 other products

    		8.8
    HighCVE-2026-25635

    calibre has a Path Traversal Leading to Arbitrary File Write and Potential Code Execution

    also in 2 other products

    		8.6
    HighCVE-2026-33206

    calibre has a path traversal vulnerability

    also in 2 other products

    		6.3
    HighCVE-2026-25636

    calibre has a Path Traversal Leading to Arbitrary File Corruption and Code Execution

    also in 2 other products

    		8.2
    HighCVE-2026-25731

    Kovidgoyal Calibre: Improper Neutralization of Special Elements Used in a Template Engine

    also in 1 other product

    		7.8
    MediumCVE-2026-27810

    calibre Vulnerable to HTTP Response Header Injection

    also in 2 other products

    		6.4
    MediumCVE-2026-33205

    calibre has Server-Side Request Forgery in ebook viewer backend

    also in 2 other products

    		5.5
    MediumCVE-2026-27824

    calibre has IP Ban Bypass via X-Forwarded-For Header Spoofing

    also in 2 other products

    		5.3
    HighCVE-2026-30853

    calibre has a Path Traversal Leading to Arbitrary File Write

    also in 2 other products

    		5.0

    All products by Calibre