CVE-2026-105080
CRITICAL NVDCVSS Score
9.9
Severity
CRITICAL
Source
NVD
Published
Oct 03, 2026
Description
In ConvertX before 0.19.0, converters/calibre.ts does not block recipe files, and instead passes them to the ebook-convert program from Calibre. This affects executable code in a .recipe or .downloaded_recipe file.