Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
calibre is a cross-platform e-book manager for viewing, converting, editing, and cataloging e-books. Versions 9.2.1 and below are vulnerable to Path Traversal through PDB readers (both 132-byte and 202-byte header variants) that allow arbitrary file writes with arbitrary extension and arbitrary content anywhere the user has write permissions. Files are written in 'wb' mode, silently overwriting existing files. This can lead to potential code execution and Denial of Service through file corruption. This issue has been fixed in version 9.3.0.
Priority
LOW
Exploitation
NONE
PoC
YES
Patch
AVAILABLE
Momentum
STABLE
If you run products in this scope, you should treat this CVE as relevant to your environment.
| Date | Total | Labels |
|---|
| 2026-02-20 | 4 | Disclosure3Patch1 |
| 2026-02-24 | 1 | Patch1 |
| 2026-02-25 | 1 | Disclosure1 |
CVE-2026-26065 Path Traversal in Calibre E-Book Manager Allows Arbitrary File Writes https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-26065
Post summary
This post announces CVE-2026-26065, a path traversal flaw in Calibre E‑Book Manager enabling arbitrary file writes, without providing any PoC, exploit code, active exploitation evidence, or patch details.
CVE-2026-26065 (CVSS:9.3, HIGH) is Analyzed. calibre is a cross-platform e-book manager for viewing, converting, editing, and cataloging e-books. Versions 9.2.1 and ..https://nvd.nist.gov/vuln/detail/CVE-2026-26065 #cybersecurityawareness #cybersecurity #CVE #infosec #hacker #nvd #mitre
Post summary
The post references CVE-2026-26065, noting its high CVSS score and that it affects calibre versions 9.2.1 and later, but provides no details on exploitation or mitigation.
`calibre` versions below 9.3.0 are vulnerable to path traversal (UBUNTU-CVE-2026-26065) when processing PDB files, potentially allowing arbitrary file access. Remediation involves updating. #calibre #PathTraversal #infosec https://www.pulsepatch.io/posts/ubuntu-cve-2026-26065-calibre-path-traversal-vulnerability
Post summary
Calibre versions below 9.3.0 are vulnerable to a path traversal flaw (CVE-2026-26065) that could allow arbitrary file access; users should update to mitigate.
🟠 CVE-2026-26065 - High calibre is a cross-platform e-book manager for viewing, converting, editing, and cataloging e-books. Versions 9.2.1 and below are vulnerable to Path Traversal through PDB readers (both 132-by... https://www.thehackerwire.com/vulnerability/CVE-2026-26065/ https://t.co/RiJ4aZgFu6
Post summary
The text announces a path traversal vulnerability in Calibre 9.2.1 and earlier, linking to a vulnerability article, but does not present PoC, exploit code, active exploitation, or patch information.
CVE-2026-26065 calibre is a cross-platform e-book manager for viewing, converting, editing, and cataloging e-books. Versions 9.2.1 and below are vulnerable to Path Traversal through… https://www.cve.org/CVERecord?id=CVE-2026-26065
Post summary
CVE-2026-26065 enables a path traversal attack against Calibre 9.2.1 and older.
🚨 CRITICAL: Path traversal in calibre <9.3.0 (CVE-2026-26065) lets attackers write files anywhere the user can, risking code execution & DoS. Upgrade now! 🛡️ https://radar.offseq.com/threat/cve-2026-26065-cwe-22-improper-limitation-of-a-pat-53326093 #OffSeq #Vulnerability #Cal... https://t.co/t2V0uTABQv
Post summary
The tweet alerts users to a critical path‑traversal flaw in Calibre versions under 9.3 that can lead to code execution or denial of service, and urges upgrading to remediate the issue.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | calibre-ebook | calibre | - | - | - |