CVE-2026-105080
CRITICAL
NVD
CVSS Score
9.9
Severity
CRITICAL
Published
Oct 03, 2026
Vendor
unknown
Description
In ConvertX before 0.19.0, converters/calibre.ts does not block recipe files, and instead passes them to the ebook-convert program from Calibre. This affects executable code in a .recipe or .downloaded_recipe file.