Multiple vulnerabilities in SPIP (July 7, 2026)

unknown

Multiple vulnerabilities have been discovered in SPIP. Some of them allow an attacker to cause a breach of data confidentiality, a SQL injection (SQLi), and a remote indirect code injection (XSS).

CSIRTS triage

What: Multiple vulnerabilities allow data confidentiality breaches, SQL injection, and remote indirect code injection.
Who is affected: Deployments of SPIP are affected by these vulnerabilities.
Urgency: The urgency is unclear due to the unknown severity of the vulnerabilities.
Action: Monitor for updates and apply patches as they become available.

AI-assisted analysis generated from the source advisory — verify against the original.

⚡ Watch SPIP

Get an email when a new SPIP advisory drops — max one per day, one-click unsubscribe.

Details

Source: CERT-FR Avis de sécurité (FR · national-cert · site)
Severity: unknown
Published: 2026-07-07
Exploitation: Not in CISA KEV at last sync
Language: Machine-translated to English — verify against the original

Original advisory: https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0838/

Multiple vulnerabilities in SPIP (July 7, 2026)

CSIRTS triage

Details

More from CERT-FR Avis de sécurité