p PatchFirst

CVE-2026-113576

CVE-2026-113576 · Adobe Digital Editions | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') (CWE-22)

This page contains facts from public vulnerability sources. Check the original advisory before updating.

Adobe Digital Editions is affected by an Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to bypass security measures and gain unauthorized write access. Exploitation of this issue requires user interaction in that a victim must open a malicious file. Scope is changed.

CVSS 6.3 · Medium · EPSS 0.2% · Fix available

Published
Updated

Affected products and versions

  • adobe digital editions

    Versions
    • ≥ 0, ≤ 1.1 (4609): Affected (custom)
    • 1.2 (4613): Not affected (custom)

    Update to 1.2 (4613)

Original sources

Check your server →