Do Son CVE-2026-77806 (CVSS 9.8) is a SPIP unauthenticated RCE exploited in the wild, with public exploit code now available. Update to SPIP 4.4.21 now.
SPIP
CVE-2026-77647 (CVSS 9.8) is an unauthenticated SPIP remote code execution flaw exploited in the wild. Update to SPIP 4.4.20 now.
SPIP CMS at risk! Read about CVE-2024-8517, a critical security vulnerability that enables unauthenticated attackers to take control of affected servers.