{"description":"Trending threats, MITRE ATT\u0026CK coverage, and detection metadata. Fed continuously.","favicon":"https://feed.craftedsignal.io/favicon-32x32.png","feed_url":"https://feed.craftedsignal.io/products/spip--4.4.20/feed.json","home_page_url":"https://feed.craftedsignal.io/","icon":"https://feed.craftedsignal.io/apple-touch-icon.png","items":[{"_cs_actors":[],"_cs_cpes":["cpe:2.3:a:spip:spip:*:*:*:*:*:*:*:*"],"_cs_cves":[{"cvss":9.8,"id":"CVE-2026-77647"}],"_cs_exploited":false,"_cs_has_poc":false,"_cs_poc_references":[],"_cs_products":["SPIP (\u003c 4.4.20)"],"_cs_severities":["critical"],"_cs_tags":[],"_cs_type":"advisory","_cs_vendors":["SPIP"],"content_html":"\u003cp\u003eCVE-2026-77647 is a critical remote code execution vulnerability affecting the SPIP web publishing system. The flaw is triggered via the 'X-Spip-Filtre' HTTP header, allowing unauthenticated attackers to execute arbitrary code on the target server. The vulnerability has a CVSS 3.1 score of 9.8. Proof-of-concept exploit code is publicly available, increasing the likelihood of exploitation.\u003c/p\u003e\n\u003ch2 id=\"impact\"\u003eImpact\u003c/h2\u003e\n\u003cp\u003eSuccessful exploitation allows for unauthenticated remote code execution, leading to full server compromise, data exfiltration, or complete loss of availability.\u003c/p\u003e\n\u003ch2 id=\"recommendation\"\u003eRecommendation\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eIdentify all internet-facing SPIP installations within your environment.\u003c/li\u003e\n\u003cli\u003ePatch SPIP instances immediately to the vendor-recommended version addressing CVE-2026-77647.\u003c/li\u003e\n\u003cli\u003eMonitor web server access logs for anomalous HTTP requests containing the 'X-Spip-Filtre' header.\u003c/li\u003e\n\u003cli\u003eBlock identified malicious IP addresses associated with exploit attempts at the perimeter firewall or WAF.\u003c/li\u003e\n\u003c/ul\u003e\n","date_modified":"2026-10-27T10:52:42Z","date_published":"2026-10-27T10:52:42Z","id":"https://feed.craftedsignal.io/briefs/2026-10-spip-rce-cve-2026-77647/","summary":"A critical unauthenticated remote code execution vulnerability in SPIP, involving the X-Spip-Filtre header, has available public proof-of-concept exploits, presenting a high risk for unpatched web servers.","title":"SPIP: Unauthenticated Remote Code Execution (CVE-2026-77647)","url":"https://feed.craftedsignal.io/briefs/2026-10-spip-rce-cve-2026-77647/"}],"language":"en","title":"CraftedSignal Threat Feed - SPIP (\u003c 4.4.20)","version":"https://jsonfeed.org/version/1.1"}