0day - RCE - SPIP - CVE-2026-66738
Remote code execution in SPIP (SQLite) - CVE-2026-66738
An authenticated editor, and in some configurations an anonymous visitor, can run arbitrary OS commands on SPIP installations backed by SQLite.
CVSS 8.8
An authenticated editor, and in some configurations an anonymous visitor, can run arbitrary OS commands on SPIP installations backed by SQLite.