https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-02T11:50:31.416495+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/certfr-2026-avi-1033 certfr-2026-avi-1033 — Une vulnérabilité a été découverte dans SPIP. Elle permet à un attaquant de provoquer une exécution de code arbitraire… 2026-10-02T11:50:31.421548+00:00 certfr-2026-avi-1033 https://cve.radiocsirt.org/vuln/euvd-2026-357541 EUVD-2026-357541 2026-10-02T11:50:31.421583+00:00 EUVD-2026-357541 https://cve.radiocsirt.org/vuln/fkie_cve-2026-77647 fkie_cve-2026-77647 2026-10-02T11:50:31.421598+00:00

SPIP before 4.4.20 allows unauthenticated remote attackers to execute arbitrary code, as exploited in the wild in August 2026. This is related to incorrect identification of <?php blocks, and var_export's mishandling of certain cases such as presence of a '<' character.

 https://cve.radiocsirt.org/vuln/ghsa-wj6g-rh9q-6vvm GHSA-wj6g-rh9q-6vvm 2026-10-02T11:50:31.421626+00:00

SPIP before 4.4.20 allows unauthenticated remote attackers to execute arbitrary code, as exploited in the wild in August 2026. This is related to incorrect identification of <?php blocks, and var_export's mishandling of certain cases such as presence of a '<' character.

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-77647 UBUNTU-CVE-2026-77647 2026-10-02T11:50:31.421643+00:00

Affected: Ubuntu:Pro:16.04:LTS: spip, Ubuntu:Pro:18.04:LTS: spip, Ubuntu:Pro:20.04:LTS: spip, Ubuntu:22.04:LTS: spip, Ubuntu:24.04:LTS: spip, Ubuntu:26.04:LTS: spip

SPIP before 4.4.20 allows unauthenticated remote attackers to execute arbitrary code, as exploited in the wild in August 2026. This is related to incorrect identification of <?php blocks, and var_export's mishandling of certain cases such as presence of a '<' character.