Skip to content
CVE Ledger
  • Newest CVEsPage
  • Recently added to KEVPage
  • Rising exploitation (EPSS)Page
  • Weekly digestPage
  • StatisticsPage
  • WatchlistPage
  • API docsPage
  • MCP serverPage
  • AboutPage
  • Data sourcesPage
  • Data statusPage
  • ChangelogPage
  • How it's builtPage
  • Support the projectPage

14 results

readest vulnerabilities

5 published CVEs name readest among the affected products.

Newest CVEs

  • CVE-2026-57562

    Readest: Subscription/entitlement hijack: /api/stripe/check binds any paid Checkout Session to the caller

    readest · readest

    Medium6.5
  • CVE-2026-57565

    Readest: Cross-tenant object write via unsanitized fileName in /api/storage/upload (object-key path traversal)

    readest · readest

    Medium6.5
  • CVE-2026-57566

    Readest: Unauthenticated SSRF / open request proxy in /api/opds/proxy

    readest · readest

    Critical9.3
  • CVE-2026-57567

    Readest: Unscoped Tauri IPC download_file/upload_file allow arbitrary local file write and read from the webview

    readest · readest

    High8.6
  • CVE-2026-82642

    Readest: unsanitized iframe srcdoc attribute in the EPUB sanitizer can lead to arbitrary code execution

    readest · readest

    High8.8