S
Vendor security profile
SPIP
Product portfolio, patch evidence and exploitation signals in a single security scorecard
The data is combined from the CVE Program, NVD, CISA KEV and vendor security advisories.
Total CVEs7
Critical5
CISA KEV0
Public exploit4
Patch rate%57
Avg. CVSS9.1
12-month vulnerability rate
0
0
0
0
0
0
0
0
0
3
3
1
CVE KEV
CVE severity distribution
7toplam CVE
Critical5 (71%)
High2 (29%)
Patch and exploitation view
%57
Verified patch
%0
CISA KEV
%57
Public exploit
4Patch available
0Partial
0Workaround
0Vendor: no patch
3Unknown
Latest vulnerabilities
9.3
CVE-2026-104070
SPIP Crayons Plugin < 3.5.0 Authorization Bypass RCE
S
Patch verifiedEPSS %1
9.3
CVE-2026-72710
SPIP < 4.4.18 RCE via editer_objet.php Job Queue Injection
S
Patch verifiedEPSS %1
9.3
CVE-2026-72709
SPIP < 4.4.18 Missing Authorization via ecrire/action/
S
Patch verifiedEPSS %1
8.7
CVE-2026-72708
SPIP < 4.4.18 Unauthenticated Blind SQL Injection via sitemap.xml.html
S
Patch verifiedEPSS %1
9.8
CVE-2026-77806
Code injection in SPIP
S
Patch status unknownEPSS %4
9.8
CVE-2026-77647
Code injection in SPIP
S
Patch status unknownEPSS %2
7.7
CVE-2026-66738
SPIP < 4.4.18 Code Injection via Navigation Endpoint on SQLite
S
Patch status unknownEPSS %1