https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-07T01:14:43.744584+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/certfr-2026-avi-0217 certfr-2026-avi-0217 — De multiples vulnérabilités ont été découvertes dans SPIP. Certaines d'entre elles permettent à un attaquant de provoqu… 2026-10-07T01:14:43.747920+00:00 certfr-2026-avi-0217 https://cve.radiocsirt.org/vuln/euvd-2026-321161 EUVD-2026-321161 2026-10-07T01:14:43.747953+00:00 EUVD-2026-321161 https://cve.radiocsirt.org/vuln/fkie_cve-2026-22205 fkie_cve-2026-22205 2026-10-07T01:14:43.747968+00:00

SPIP versions prior to 4.4.10 contain an authentication bypass vulnerability caused by PHP type juggling that allows unauthenticated attackers to access protected information. Attackers can exploit loose type comparisons in authentication logic to bypass login verification and retrieve sensitive internal data.

 https://cve.radiocsirt.org/vuln/ghsa-gxmj-pr3w-6wmh GHSA-gxmj-pr3w-6wmh 2026-10-07T01:14:43.747995+00:00

SPIP versions prior to 4.4.10 contain an authentication bypass vulnerability caused by PHP type juggling that allows unauthenticated attackers to access protected information. Attackers can exploit loose type comparisons in authentication logic to bypass login verification and retrieve sensitive internal data.

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-22205 UBUNTU-CVE-2026-22205 2026-10-07T01:14:43.748011+00:00

Affected: Ubuntu:Pro:16.04:LTS: spip, Ubuntu:Pro:18.04:LTS: spip, Ubuntu:Pro:20.04:LTS: spip, Ubuntu:22.04:LTS: spip, Ubuntu:24.04:LTS: spip, Ubuntu:25.10: spip, Ubuntu:26.04:LTS: spip

SPIP versions prior to 4.4.10 contain an authentication bypass vulnerability caused by PHP type juggling that allows unauthenticated attackers to access protected information. Attackers can exploit loose type comparisons in authentication logic to bypass login verification and retrieve sensitive internal data.