CVE-2024-7009: Calibre-Ebook Calibre

High severity, CVSS 7.1. EPSS: 13.9% chance of exploitation in the next 30 days.

Unsanitized user-input in Calibre <= 7.15.0 allow users with permissions to perform full-text searches to achieve SQL injection on the SQLite database.

Affected products

• Calibre-Ebook Calibre: up to and including 7.15.0

Published 2024-08-06. Last modified 2026-06-17.