PT-2026-22384 · Calibre · Calibre

Mistz1 · Published 2026-01-01 · Updated 2026-04-21 · CVE-2026-27810

Positive Technologies (AI Summary)

CVSS v3.1

6.4

Medium

Base vector

AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions calibre versions prior to 9.4.0

Description calibre is an e-book manager for viewing, converting, editing, and cataloging e-books. A HTTP Response Header Injection exists in the calibre Content Server for versions before 9.4.0. An authenticated user can inject arbitrary HTTP headers into server responses through an unsanitized content disposition query parameter. This occurs in the /get/ and /data-files/get/ API endpoints. The issue is exploitable by any authenticated user, potentially through a crafted link. All users running the calibre Content Server with authentication enabled are affected.

Recommendations Update to calibre version 9.4.0 or later.

Exploit

Fix

Weakness Enumeration

CWE-113

Related Identifiers

CVE-2026-27810

GHSA-5FPJ-FXW7-8GRW

OPENSUSE-SU-2026:10587-1

Affected Products

Calibre

References · 22

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/27xxx/CVE-2026-27810.json · Exploit
• https://github.com/kovidgoyal/calibre/security/advisories/GHSA-5fpj-fxw7-8grw · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2026-27810 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-27810 · Security Note
• https://osv.dev/vulnerability/openSUSE-SU-2026:10587-1 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2026-27810 · Security Note
• https://ubuntu.com/security/CVE-2026-27810 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2026-27810 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2026-27810 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2026-27810 · Vendor Advisory
• https://suse.com/security/cve/CVE-2026-33205 · Note
• https://suse.com/security/cve/CVE-2026-25635 · Note
• https://t.me/cveNotify/154146 · Telegram Post
• https://suse.com/security/cve/CVE-2026-26064 · Note
• https://suse.com/security/cve/CVE-2026-25731 · Note