---
id: CVE-2026-113576
title: >-
  Adobe Digital Editions | Improper Limitation of a Pathname to a Restricted
  Directory ('Path Traversal') (CWE-22)
summary: >-
  Adobe Digital Editions is affected by an Improper Limitation of a Pathname to
  a Restricted Directory ('Path Traversal') vulnerability that could result in a
  Security feature bypass. An attacker could leverage this vulnerability to
  bypass…
severity: medium
cvss: 6.3
cvssVector: 'CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:N/I:H/A:N'
cvssSource: cna
cwe:
  - CWE-22
vendor: Adobe
product: Adobe Digital Editions
affected:
  - digital_editions <= 1.1 (4609)
ssvc:
  exploitation: none
  automatable: 'no'
  technicalImpact: partial
  timestamp: '2026-10-29T16:15:16.868333Z'
published: '2026-10-29'
updated: '2026-10-29'
sourceUpdated: '2026-10-29T17:17:37.992Z'
source: CVEORG
sourceUrl: 'https://www.cve.org/CVERecord?id=CVE-2026-113576'
references:
  - url: 'https://www.adobe.com/solutions/ebook/digital-editions/release-notes.html'
tags:
  - cve.org
epss: 0.00218
epssPercentile: 0.12305
ingestedAt: '2026-11-01T22:02:40.979Z'
---

## Overview

Adobe Digital Editions is affected by an Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to bypass security measures and gain unauthorized write access. Exploitation of this issue requires user interaction in that a victim must open a malicious file. Scope is changed.

## Affected

- `digital_editions <= 1.1 (4609)`

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.