Multiple vulnerabilities in SPIP (August 11, 2026)

unknown

Multiple vulnerabilities have been discovered in SPIP. Some of them allow an attacker to cause remote arbitrary code execution, SQL injection (SQLi) and server-side request forgery (SSRF).

CSIRTS triage

What: Multiple vulnerabilities in SPIP enable remote arbitrary code execution, SQL injection, and server-side request forgery.
Who is affected: SPIP installations exposed to remote attackers.
Urgency: High urgency due to remote code execution capability; no exploitation details provided but RCE warrants rapid response.
Action: Obtain and apply SPIP security patches immediately; identify vulnerable SPIP versions in production.

AI-assisted analysis generated from the source advisory — verify against the original.

⚡ Watch SPIP

Get an email when a new SPIP advisory drops — max one per day, one-click unsubscribe.

Details

Source: CERT-FR Avis de sécurité (FR · national-cert · site)
Severity: unknown
Published: 2026-08-11
Exploitation: Not in CISA KEV at last sync
Language: Machine-translated to English — verify against the original

Original advisory: https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0995/

Multiple vulnerabilities in SPIP (August 11, 2026)

CSIRTS triage

Details

More from CERT-FR Avis de sécurité