CVE-2026-77647

CVE

Threat entity extracted from intelligence sources

Frequency

occurrences

First Seen

October 26, 2026

Last Seen

October 27, 2026

API

Exploited in Wild

—

Ransomware Use

—

Public Exploits

—

Attack Vector

—

Vulnerability Overview

Exploitation Activity

Exploitation Intelligence

Critical RCE Vulnerability in SPIP CMS Disclosed72.8

CVE-2026-77647 is a critical unauthenticated remote code execution (RCE) vulnerability affecting all versions of SPIP CMS prior to 4.4.20. This flaw allows remote attackers to execute arbitrary PHP code without authentication or user interaction. The vulnerability has been actively exploited since A...