CVE-2026-105080: critical vulnerability in C4illin ConvertX
Published · Updated
48Vexday Risk Score
No sign of exploitation. It has a public proof of concept.
ssvc Attendcvss 9.4epss 0.3%
from disclosure to weapon3 days
Published on NVDOct 3
1st PoC+3d
exploitation probability
0.3%top 76% of all CVEs
observed exploitation
nono source reports it
1 public exploit(s)
In ConvertX before 0.19.0, converters/calibre.ts does not block recipe files, and instead passes them to the ebook-convert program from Calibre. This affects executable code in a .recipe or .downloaded_recipe file.
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H
Affected products
C4illin · ConvertXpublic PoCs found — 1
githubgithub.com/beyavuz/cve-2026-105080-poc★ 0⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.
Related CVEs — C4illin ConvertX
In the same product, most dangerous first.
CVE-2025-66449HIGHConvertX has Path Traversal that leads to Arbitrary File Write and Arbitrary Code ExecutionEPSS 0.8%CVE-2026-85618HIGHConvertX 0.17.0 Arbitrary File Read via LaTeX Input DirectivesEPSS 0.5%CVE-2026-24741HIGHConvertX Vulnerable to Arbitrary File Deletion via Path Traversal in `POST /delete`EPSS 0.5%