5 matches found
EUVD-2026-14268
SPIP 4.4.10 through 4.4.12 before 4.4.13 allows unintended privilege assignment of administrator privileges during the editing of an author data structure because of STATUT mishandling...
6.7CVSS5.9AI score0.00243EPSS
SaveExploits0References4
CVE-2026-33549
SPIP 4.4.10 through 4.4.12 before 4.4.13 allows unintended privilege assignment of administrator privileges during the editing of an author data structure because of STATUT mishandling...
6.7CVSS6AI score0.00243EPSS
SaveExploits0References4Affected Software1
CVE-2026-33549
CVE-2026-33549 affects SPIP 4.4.10–4.4.12 (before 4.4.13) where STATUT mishandling allows unintended privilege escalation during editing of an author data structure. Debian/DSA-6174-1 confirms the fix in SPIP 4.4.13+dfsg-0+deb13u1; recommended upgrade to that version. Other connected sources (e.g...
8.8CVSS5.9AI score0.00243EPSS
SaveExploits0References3Affected Software1
20