Products: 1
Vulnerabilities: 26
Known Exploited: 0
11
Critical Level Threats
2
High Level Threats
11
Medium Level Threats
1
Low Level Threats
Vulnerabilities
100806040200
JanFebMarAprMayJunJulAugSepOctNovDec
Critical Level Threats
High Level Threats
Medium Level Threats
Low Level Threats
Products Security index
Actions
Items Per Page
Vulnerabilities
CVE-2026-7709
janeczku Calibre-Web Endpoint kobo_auth.py generate_auth_token improper authorization
Last Modified: May 04, 2026
Published: May 03, 2026
CVE-2025-65858
A Stored Cross-Site Scripting (XSS) vulnerability in Calibre-Web v0.6.25 allows attackers to inject malicious JavaScript into the 'username' field during user creation. The payload is stored unsanitized and later executed when the /ajax/listusers endpoint is accessed.
Last Modified: Dec 23, 2025
Published: Dec 02, 2025
CVE-2025-7404
Calibre Web 0.6.24 & Autocaliweb 0.7.0 - Blind C
Last Modified: Jan 16, 2026
Published: Jul 24, 2025
CVE-2025-6998
Calibre Web 0.6.24 & Autocaliweb 0.7.0 - ReDoS
Last Modified: Apr 15, 2026
Published: Jul 24, 2025
CVE-2021-3988
Cross-site Scripting (XSS) in janeczku/calibre-web
Last Modified: Nov 20, 2024
Published: Nov 15, 2024
Items Per Page
