CVE-2026-27745

🗓️ 25 Feb 2026 03:08:11Reported by VulnCheckType

cve🔗 web.nvd.nist.gov📰️ 1 Media mentions👁 4 Views

An authenticated RCE in SPIP interface_traduction_objets before 4.3.3 via an unfiltered hidden form field.

Reporter	Title	Published	Views	Family All 9
ATTACKERKB	CVE-2026-27745	25 Feb 202603:08	–	attackerkb
Circl	CVE-2026-27745	25 Feb 202605:43	–	circl
CNNVD	SPIP interface_traduction_objets 安全漏洞	25 Feb 202600:00	–	cnnvd
Cvelist	CVE-2026-27745 SPIP interface_traduction_objets < 2.2.2 Authenticated RCE	25 Feb 202603:08	–	cvelist
EUVD	EUVD-2026-8607	25 Feb 202606:31	–	euvd
NVD	CVE-2026-27745	25 Feb 202604:16	–	nvd
Positive Technologies	PT-2026-21860	25 Feb 202600:00	–	ptsecurity
RedhatCVE	CVE-2026-27745	26 Feb 202604:15	–	redhatcve
Vulnrichment	CVE-2026-27745 SPIP interface_traduction_objets < 2.2.2 Authenticated RCE	25 Feb 202603:08	–	vulnrichment

NVD

Vulners

CNA

Node

spip interface_traduction_objetsRange<2.2.2

[
  {
    "defaultStatus": "unaffected",
    "product": "interface_traduction_objets",
    "repo": "https://git.spip.net/spip-contrib-extensions/interface_traduction_objets",
    "vendor": "SPIP",
    "versions": [
      {
        "lessThan": "2.2.2",
        "status": "affected",
        "version": "0",
        "versionType": "semver"
      }
    ]
  }
]

Source	Link
blog	www.blog.spip.net/Mise-a-jour-de-securite-sortie-de-SPIP-4-4-10.html
vulncheck	www.vulncheck.com/advisories/spip-interface-traduction-objets-authenticated-rce
git	www.git.spip.net/spip-contrib-extensions/interface_traduction_objets/-/commit/db3417b7811774f04c3ff191ca1737fe660ef0be
chocapikk	www.chocapikk.com/posts/2026/spip-plugins-vulnerabilities/
plugins	www.plugins.spip.net/interface_traduction_objets

05 Mar 2026 01:31Current

6.3Medium risk

Vulners AI Score6.3

CVSS 3.18.8

CVSS 48.7

EPSS0.00158

SSVC

CWE-94