HarborGuard / CVE
Back to search
HIGHCVE-2026-8429Published Modified CNA VulnCheck

CVE-2026-8429: SPIP < 4.4.14 Remote Code Execution via Private Space

SPIP versions prior to 4.4.14 contain a remote code execution vulnerability in the private space that allows attackers to execute arbitrary code in the context of the web server. Attackers can exploit this vulnerability to achieve code execution that bypasses the SPIP security screen protections.

Metrics

CVSS v4.0
8.7
Severity
HIGH
Fixed in
4.4.14
Affected Products
1

Fix available

4.4.14
Affected packages
  • SPIP / SPIP
    < 4.4.14 (from 0)
CVSS Vector
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
References