CyberRota Analysis
AI-GeneratedUnspecified versions of SPIP prior to 4.4.20 are vulnerable to unauthenticated remote code execution due to improper handling of PHP blocks and specific cases in the var_export function. This critical vulnerability, actively exploited in the wild, allows attackers to execute arbitrary code, posing significant risks to the integrity and security of affected systems. Organizations using SPIP should prioritize immediate updates to mitigate potential exploitation.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
SPIP before 4.4.20 allows unauthenticated remote attackers to execute arbitrary code, as exploited in the wild in August 2026. This is related to incorrect identification of <?php blocks, and var_export's mishandling of certain cases such as presence of a '<' character.