Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
calibre is an e-book manager. Prior to 9.2.0, Calibre's CHM reader contains a path traversal vulnerability that allows arbitrary file writes anywhere the user has write permissions. On Windows (haven't tested on other OS's), this can lead to Remote Code Execution by writing a payload to the Startup folder, which executes on next login. This vulnerability is fixed in 9.2.0.
Priority
LOW
Exploitation
NONE
PoC
YES
Patch
AVAILABLE
Momentum
STABLE
If you run products in this scope, you should treat this CVE as relevant to your environment.
| Date | Total | Labels |
|---|
| 2026-02-06 | 3 | Disclosure2Patch1 |
| 2026-02-08 | 1 | Patch1 |
CVE-2026-25635 calibre is an e-book manager. Prior to 9.2.0, Calibre's CHM reader contains a path traversal vulnerability that allows arbitrary file writes anywhere the user has wri… https://www.cve.org/CVERecord?id=CVE-2026-25635
Post summary
A path traversal flaw in Calibre’s CHM reader before v9.2.0 lets an attacker write arbitrary files wherever the user can write.
A path traversal flaw (CVE-2026-25635) affects Calibre, potentially leading to arbitrary file write and code execution. Review patches. #Calibre #Infosec #Vulnerability https://www.pulsepatch.io/posts/cve-2026-25635-calibre-path-traversal
Post summary
The tweet announces a path traversal vulnerability in Calibre that could allow arbitrary file write and code execution, and urges users to review available patches.
[CVE-2026-25635: HIGH] Stay safe online! Update Calibre to version 9.2.0 to patch a path traversal vulnerability that could lead to Remote Code Execution on Windows systems. #cybersecurity#cve,CVE-2026-25635,#cybersecurity https://cvefind.com/CVE-2026-25635
Post summary
The post urges users to update Calibre to version 9.2.0, patching a path‑traversal vulnerability that could enable remote code execution on Windows systems.
🟠 CVE-2026-25635 - High calibre is an e-book manager. Prior to 9.2.0, Calibre's CHM reader contains a path traversal vulnerability that allows arbitrary file writes anywhere the user has write permissions. On Window... https://www.thehackerwire.com/vulnerability/CVE-2026-25635/ https://t.co/96q4T7PdwT
Post summary
The post announces a high‑severity path traversal flaw in Calibre's CHM reader (versions before 9.2.0) that permits arbitrary file writes, with no PoC, exploit code, or active exploitation details disclosed.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | calibre-ebook | calibre | - | - | - |