← Database

CVE-2026-77647

CRITICAL CVSS: 9.8 Published: 2026-08-20 Modified: 2026-08-21

Description

SPIP before 4.4.20 allows unauthenticated remote attackers to execute arbitrary code, as exploited in the wild in August 2026. This is related to incorrect identification of

Affected Platforms

Unknown

Weakness Type

CWE-94

References