SPIP

Records88All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical20CVSS 9.0–10.0

CVSS high29CVSS 7.0–8.9

Exploited now

SPIP records in CISA KEV

No SPIP vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Spip 69 records CRITICAL Interface Traduction Objets 2 records HIGH Jeux 1 record MEDIUM Referer Spam 1 record HIGH Saisies 1 record MEDIUM Tickets 1 record HIGH

Records

1 record in Tickets · all components

TI-2026-22104 CVE-2026-27744 · GHSA-68cf-j259-wgr8

SPIP tickets < 4.3.3 Unauthenticated RCE

HIGH 81

The SPIP tickets plugin versions prior to 4.3.3 contain an unauthenticated remote code execution vulnerability in the forum preview handling for public ticket pages.

CVSS 4.0CRITICAL 9.3 Network No auth No interaction EPSS 0.01032 Published 2026-02-25 Fixed in 4.3.3 CWE-94

Open these records in search →

Critical	20
High	29
Medium	37
Low	2
No CVSS	0