calibre is an e-book manager. Prior to 9.10.0, a malicious EPUB, OPF, or PDF file can execute arbitrary Python code when its metadata is read by calibre, including through Add books or Edit books, by embedding a custom column definition with a python: template in calibre:user_metadata that is passed unsanitized to exec() in the template formatter. This issue is fixed in version 9.10.0.

The remote Fedora 43 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-6776f4e492 advisory.

    Fixes CVE-2026-53511

Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Fedora 44 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-79a5573be3 advisory.

    Update to 9.11.0. Fixes rhbz#2493338 and CVE-2026-53511

Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - calibre is an e-book manager. Prior to 9.10.0, a malicious EPUB, OPF, or PDF file can execute arbitrary     Python code when its metadata is read by calibre, including through Add books or Edit books, by embedding     a custom column definition with a python: template in calibre:user_metadata that is passed unsanitized to     exec() in the template formatter. This issue is fixed in version 9.10.0. (CVE-2026-53511)

Note that Nessus relies on the presence of the package as reported by the vendor.

ID	Name	Product	Family	Severity
326718	Fedora 43 : calibre (2026-6776f4e492)	Nessus	Fedora Local Security Checks	high
326571	Fedora 44 : calibre (2026-79a5573be3)	Nessus	Fedora Local Security Checks	high
325781	Linux Distros Unpatched Vulnerability : CVE-2026-53511	Nessus	Misc.	high

Detections

Analytics

CVE-2026-53511

high

Tenable Plugins

high

high

high