CVE-2026-77806: Unauthenticated RCE in SPIP with public exploit and active exploitation, 9.8 rating ‍🔥

A recently disclosed vulnerability in SPIP allows unauthenticated remote attackers to execute arbitrary code. Public exploit code has been added to the Metasploit framework. This vulnerability is being actively exploited in the wild!

Search at Netlas.io:
👉 Link: https://nt.ls/SeHVc
👉 Dork: tag.name:"spip"

Vendor's advisory:
https://blog.spip.net/Mise-a-jour-critique-de-securite-sortie-de-SPIP-4-4-21.html?lang=fr