CVE-2026-22206Disclosure(spip / spip)

LOWCVSS 8.7 · HIGH

Signal is active with 1 mentions in latest observed window

Immediate actions

Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

SPIP versions prior to 4.4.10 contain a SQL injection vulnerability that allows authenticated low-privilege users to execute arbitrary SQL queries by manipulating union-based injection techniques. Attackers can exploit this SQL injection flaw combined with PHP tag processing to achieve remote code execution on the server.

spip CVEs Back to dashboard

0.0/ 10 priority

Sources & remediation

Vendor / third-party advisories

https://www.vulncheck.com/advisories/spip-sql-injection-rce-via-union-php-tags

Other references

Weakness type (CWE)

CWE-89

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

NONE

Momentum

STABLE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

spip

Threat summary

4 mentions across 2 observed days
Momentum state: stable

What's happening

Technical details provided in 4 signals
Disclosure: 4 classified signals
Peaked 1d ago at 3 mentions (2026-02-27); latest day: 1
4 total mentions across 2 days

Affected systems

Vendors

spip

Products

spip

Deep dive

Activity timeline4 mentions / 2d

Signal classification1 categories

Disclosure

4100.0%

Referenced assets4 URLs

By indicator

Classification over time

Date	Total	Labels

2026-02-27	3	Disclosure3
2026-03-03	1	Disclosure1

Full discourse4 posts

CRAC Learning - Tech@cracbot220d
Disclosure
CVE-2026-22206 (CVSS:8.7, HIGH) is Analyzed. SPIP versions prior to 4.4.10 contain a SQL injection vulnerability that allows authenticated low-privilege users to exe..https://nvd.nist.gov/vuln/detail/CVE-2026-22206 #cybersecurityawareness #cybersecurity #CVE #infosec #hacker #nvd #mitre
Post summary
The post announces a high‑severity SQL injection flaw in SPIP versions before 4.4.10, referencing the NVD entry but offering no PoC, exploit, or patch information.
0000032
173 followersView on X
Infoflowcloud@infoflowcloud223d
Disclosure
🚨*CVE* CVE-2026-22206 SPIP versions prior to 4.4.10 contain a SQL injection vulnerability that allows authenticated low-privilege users to execute arbitrary SQL queries by manipulating uni… https://www.cve.org/CVERecord?id=CVE-2026-22206 ----- Traducción: CVE-2026-22206 SPI… http://infoflow.cloud`
Post summary
The post discloses CVE‑2026‑22206 as a SQL injection flaw in SPIP versions before 4.4.10, but offers no proof‑of‑concept, exploitation evidence, or mitigation information.
0000037
55 followersView on X
CVE@CVEnew223d
Disclosure
CVE-2026-22206 SPIP versions prior to 4.4.10 contain a SQL injection vulnerability that allows authenticated low-privilege users to execute arbitrary SQL queries by manipulating uni… https://www.cve.org/CVERecord?id=CVE-2026-22206
Post summary
The entry discloses a SQL injection flaw in SPIP versions prior to 4.4.10 that permits authenticated low‑privilege users to execute arbitrary SQL queries.
00000177
56.6K followersView on X
The Hacker Wire@TheHackerWire223d
Disclosure
🟠 CVE-2026-22206 - High SPIP versions prior to 4.4.10 contain a SQL injection vulnerability that allows authenticated low-privilege users to execute arbitrary SQL queries by manipulating union-based injection techni... https://www.thehackerwire.com/vulnerability/CVE-2026-22206/ https://t.co/iy27y32KZL
Post summary
The post announces a high‑severity SQL injection vulnerability in SPIP versions prior to 4.4.10 that permits authenticated low‑privilege users to execute arbitrary SQL, without providing PoC, patch, or exploitation details.
0000023
119 followersView on X

CPE platform detail1 entries

Part:

Vendor:

Product:

Version:

Target SW:

Target HW:

1 of 1 entries

Part	Vendor	Product	Version	Target SW	Target HW
App	spip	spip	-	-	-

Explore more

Back to dashboard spip CVEs spip vulnerabilities

What researchers are saying

CVE-2026-22206

CRAC Learning - Tech@cracbotDisclosure

The post announces a high‑severity SQL injection flaw in SPIP versions before 4.4.10, referencing the NVD entry but offering no PoC, exploit, or patch information.

Infoflowcloud@infoflowcloudDisclosure

The post discloses CVE‑2026‑22206 as a SQL injection flaw in SPIP versions before 4.4.10, but offers no proof‑of‑concept, exploitation evidence, or mitigation information.

CVE@CVEnewDisclosure

The entry discloses a SQL injection flaw in SPIP versions prior to 4.4.10 that permits authenticated low‑privilege users to execute arbitrary SQL queries.

The Hacker Wire@TheHackerWireDisclosure

The post announces a high‑severity SQL injection vulnerability in SPIP versions prior to 4.4.10 that permits authenticated low‑privilege users to execute arbitrary SQL, without providing PoC, patch, or exploitation details.