Skip to content
Critical RCE Vulnerability in SPIP CMS Disclosed

Critical RCE Vulnerability in SPIP CMS Disclosed

First seen 27 Oct 2026, 10:42 UTC • •
API

Article Content

Browse articles
ThreatCluster AI
ThreatCluster •October 27, 2026 at 12:13 UTC
  • •CVE-2026-77647 is a critical RCE vulnerability in SPIP CMS versions before 4.4.20.
  • •The flaw allows unauthenticated remote code execution, actively exploited since August 2026.
  • •An emergency patch has been released; users are urged to update to version 4.4.20 or later.

CVE-2026-77647 is a critical unauthenticated remote code execution (RCE) vulnerability affecting all versions of SPIP CMS prior to 4.4.20. This flaw allows remote attackers to execute arbitrary PHP code without authentication or user interaction. The vulnerability has been actively exploited since August 2026, prompting an emergency patch from the SPIP team. Attackers can exploit the flaw by sending crafted payloads through the SPIP functionality, leveraging mishandling in the var_export() function. The vulnerability has a CVSS score of 9.8, indicating its critical nature. A tool has been developed to automate the detection and exploitation of this vulnerability across multiple targets. Security professionals are urged to patch their systems to the latest version to mitigate risks.

Start a free Starter trial for enhanced analysis

Ask AI about this cluster

Updated just now How this analysis works

Timeline

2026-08-20
CVE-2026-77647 published
CVE-2026-77647 was published, detailing a critical RCE vulnerability in SPIP CMS.
Github
2026-10-26
Exploit tool released
A tool for automating detection and exploitation of CVE-2026-77647 was released.
Sploitus
2026-10-27
Emergency patch released
SPIP team released an emergency patch for the vulnerability, urging users to update immediately.
Github

More articles in this cluster (4)

Following this threat?

Track CVE-2026-77647 in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.

Free account · no card needed

Extracted Entities (9)

1 / 4

Common questions

Which versions of SPIP are affected?
All versions of SPIP CMS prior to 4.4.20 are affected by CVE-2026-77647.
Is there an active exploitation of this vulnerability?
Yes, the vulnerability has been actively exploited in the wild since August 2026.
What should I do to protect my systems?
Update your SPIP CMS to version 4.4.20 or later to mitigate the vulnerability.