https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T17:11:21.373440+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/certfr-2026-avi-0217 certfr-2026-avi-0217 — De multiples vulnérabilités ont été découvertes dans SPIP. Certaines d'entre elles permettent à un attaquant de provoqu… 2026-10-03T17:11:21.442025+00:00 certfr-2026-avi-0217 https://cve.radiocsirt.org/vuln/cnvd-2026-13834 cnvd-2026-13834 2026-10-03T17:11:21.442068+00:00 cnvd-2026-13834 https://cve.radiocsirt.org/vuln/euvd-2026-274512 EUVD-2026-274512 2026-10-03T17:11:21.442084+00:00 EUVD-2026-274512 https://cve.radiocsirt.org/vuln/fkie_cve-2026-22206 fkie_cve-2026-22206 2026-10-03T17:11:21.442095+00:00

SPIP versions prior to 4.4.10 contain a SQL injection vulnerability that allows authenticated low-privilege users to execute arbitrary SQL queries by manipulating union-based injection techniques. Attackers can exploit this SQL injection flaw combined with PHP tag processing to achieve remote code execution on the server.

 https://cve.radiocsirt.org/vuln/ghsa-48x6-97gc-jx62 GHSA-48x6-97gc-jx62 2026-10-03T17:11:21.442124+00:00

SPIP versions prior to 4.4.10 contain a SQL injection vulnerability that allows authenticated low-privilege users to execute arbitrary SQL queries by manipulating union-based injection techniques. Attackers can exploit this SQL injection flaw combined with PHP tag processing to achieve remote code execution on the server.

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-22206 UBUNTU-CVE-2026-22206 2026-10-03T17:11:21.442140+00:00

Affected: Ubuntu:Pro:16.04:LTS: spip, Ubuntu:Pro:18.04:LTS: spip, Ubuntu:Pro:20.04:LTS: spip, Ubuntu:22.04:LTS: spip, Ubuntu:24.04:LTS: spip, Ubuntu:25.10: spip, Ubuntu:26.04:LTS: spip

SPIP versions prior to 4.4.10 contain a SQL injection vulnerability that allows authenticated low-privilege users to execute arbitrary SQL queries by manipulating union-based injection techniques. Attackers can exploit this SQL injection flaw combined with PHP tag processing to achieve remote code execution on the server.