Vulnerabilities CVE-2026-8429

CVE-2026-8429

High

Open

TLP:CLEAR

SPIP < 4.4.14 Remote Code Execution via Private Space

NVD CVE.org

AI Analysis

No AI analysis yet.

Description

SPIP versions prior to 4.4.14 contain a remote code execution vulnerability in the private space that allows attackers to execute arbitrary code in the context of the web server. Attackers can exploit this vulnerability to achieve code execution that bypasses the SPIP security screen protections.

Details

CVSS Score: 8.8
EPSS Score ⓘ: 0.50%

40.5th percentile
CVSS Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Confidence: 90%
Published: May 12, 2026
Last Modified: May 14, 2026

Notes

No notes yet. Click "Add Note" to create the first analysis note.

Opinions

No opinions yet. Be the first to assess this intelligence.