Live › vulnerability › CVE-2026-113576
Adobe Digital Editions, an ebook reader, mishandles file paths so a crafted file can bypass security checks and write to unauthorized locations. An attacker gets write access to files on the victim's machine once the victim opens the malicious file.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-29 16:25 UTC. All times on this page are UTC.
Anyone running Adobe Digital Editions on a desktop who opens files from an untrusted source. The sources do not describe server-side or enterprise-only exposure. unknown for the exact affected version range.
No product ranges from the sources yet.
No fix yet, per the sources.
Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
Adobe Digital Editions is affected by an Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to bypass security measures and gain unauthorized write access. Exploitation of this issue requires user interaction in that a victim must open a malicious file. Scope is changed.
This page as .md · .json · in your agent: get_signal("CVE-2026-113576")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.