Most recent entries from all https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sun, 04 Oct 2026 20:37:44 +0000 CVE-2026-25635 — calibre has a Path Traversal Leading to Arbitrary File Write and Potential Code Execution https://vulnerability.circl.lu/vuln/cve-2026-25635 <p><strong>Affected:</strong> kovidgoyal calibre</p> <p>calibre is an e-book manager. Prior to 9.2.0, Calibre&#39;s CHM reader contains a path traversal vulnerability that allows arbitrary file writes anywhere the user has write permissions. On Windows (haven&#39;t tested on other OS&#39;s), this can lead to Remote Code Execution by writing a payload to the Startup folder, which executes on next login. This vulnerability is fixed in 9.2.0.</p> <p><strong>Affected:</strong> kovidgoyal calibre</p> <p>calibre is an e-book manager. Prior to 9.2.0, Calibre&#39;s CHM reader contains a path traversal vulnerability that allows arbitrary file writes anywhere the user has write permissions. On Windows (haven&#39;t tested on other OS&#39;s), this can lead to Remote Code Execution by writing a payload to the Startup folder, which executes on next login. This vulnerability is fixed in 9.2.0.</p> https://vulnerability.circl.lu/vuln/cve-2026-25635