CVE-2024-7009

7.1 highEPSS 14%

High (7.1) in calibre-ebook calibre. EPSS 14% chance of exploitation in the next 30 days.

Unsanitized user-input in Calibre <= 7.15.0 allow users with permissions to perform full-text searches to achieve SQL injection on the SQLite database.

Severity

CVSS 3.1

7.1 high

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:N

EPSS: 14% chance of exploitation in the next 30 days; higher than 96% of CVEs (scores of 2026-10-31)
CWE: CWE-89
Published: 2024-08-06
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

calibre-ebook:calibre

References

https://github.com/kovidgoyal/calibre/commit/d56574285e8859d3d715eb7829784ee74337b7d7
https://starlabs.sg/advisories/24/24-7009/

Check your stack JSON