CVE-2026-22205 | Teknoloji dünyasından en güncel haberleri ve güvenlikle ilgili gelişmeleri takip edin.

SPIP versions prior to 4.4.10 contain an authentication bypass vulnerability caused by PHP type juggling that allows unauthenticated attackers to access protect…
High CVSS: 8.7

CVE-2026-22205

SPIP versions prior to 4.4.10 contain an authentication bypass vulnerability caused by PHP type juggling that allows unauthenticated attackers to access protected information. Attackers can exploit loose type comparisons in authentication logic to bypass login verification and retrieve sensitive internal data.
Vendor
Spip
Product
Spip
CWE
CWE-288
Yayın Tarihi
2026-02-26 21:28:52
Güncelleme
2026-03-02 16:08:10
Source Identifier
disclosure@vulncheck.com
KEV Date Added
-

Kategoriler

CWE-288 Spip HIGH Spip 2026

Referanslar

https://blog.spip.net/Mise-a-jour-de-securite-sortie-de-SPIP-4-4-10.html https://git.spip.net/spip/spip https://www.vulncheck.com/advisories/spip-sql-injection-rce-via-union-php-tags