CVE-2026-25635

CVE-2026-25635 is a path traversal vulnerability in Calibre e-book manager versions prior to 9.2.0. This flaw allows an attacker to write arbitrary files to any location where the user has write permissions. On Windows systems, this can lead to Remote Code Execution by placing a malicious payload in the Startup folder. The vulnerability has a high CVSS score of 8.6, indicating a significant risk due to its low attack complexity and high impact on confidentiality, integrity, and availability. It requires user interaction (UI:R) and local access (AV:L), but the scope is changed (S:C), meaning a successful exploit can affect resources beyond the attacker's authorization. Currently, there is no evidence of active exploitation, nor are there publicly available exploit modules in Metasploit, Nuclei, or ExploitDB. Community discussion and media coverage are minimal, suggesting low public awareness of this vulnerability.