CVE-2026-77647

creationtimestamp| type| source ---|---|--- 2026-08-21 00:00:18+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mtkhd35e7u27 2026-08-21 00:12:05+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3mtkhybv7ip25 2026-08-21 00:19:23+00:00| seen|...

CVE-2026-77647

SPIP before 4.4.20 allows unauthenticated remote attackers to execute arbitrary code, as exploited in the wild in August 2026. This is related to incorrect identification of ?php blocks, and varexport's mishandling of certain cases such as presence of a '' character...

CVE-2026-77647

SPIP before 4.4.20 allows unauthenticated remote attackers to execute arbitrary code, as exploited in the wild in August 2026. This is related to incorrect identification of ?php blocks, and varexport's mishandling of certain cases such as presence of a '' character...