Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Advisory: SPIP — blog.spip.net/Mise-a-jour-de-securite-sortie-de-SPIP-4-4-10… Clear all filters
TI-2026-17815 CVE-2026-22205 · GHSA-gxmj-pr3w-6wmh

SPIP < 4.4.10 Authentication Bypass via PHP Type Juggling

Priority MEDIUM 44

SPIP versions prior to 4.4.10 contain an authentication bypass vulnerability caused by PHP type juggling that allows unauthenticated attackers to access protected information.

CVSS 4.0HIGH 8.7 Network No auth No interaction EPSS 0.00536 Published 2026-02-26 Fixed in 4.4.10 CWE-288
TI-2026-17816 CVE-2026-22206 · GHSA-48x6-97gc-jx62

SPIP < 4.4.10 SQL Injection RCE via Union & PHP Tags

Priority MEDIUM 41

SPIP versions prior to 4.4.10 contain a SQL injection vulnerability that allows authenticated low-privilege users to execute arbitrary SQL queries by manipulating union-based injection techniques.

CVSS 4.0HIGH 8.7 Network Low privileges No interaction EPSS 0.00638 Published 2026-02-26 Fixed in 4.4.10 CWE-89