Signal is active with 3 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
SPIP 4.4.10 through 4.4.12 before 4.4.13 allows unintended privilege assignment (of administrator privileges) during the editing of an author data structure because of STATUT mishandling.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
AVAILABLE
Momentum
NONE
If you run products in this scope, you should treat this CVE as relevant to your environment.
CVE-2026-33549 SPIP Privilege Escalation Vulnerability in Versions 4.4.10 Through 4.4.12 https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-33549
Post summary
The post references a privilege escalation vulnerability (CVE‑2026‑33549) in SPIP 4.4.10‑4.4.12 but provides only minimal technical detail and no evidence of exploitation or remediation.
⚡ New CVE Alert: CVE-2026-33549 📊 Severity: 6.7 🚨 Risk Level: Medium 🧩 Affects: Multiple / Unspecified Products Reference: https://nvd.nist.gov/vuln/detail/CVE-2026-33549 #CVE-2026-33549 #CVE #Medium #CyberSecurity #InfoSec https://t.co/MI4iDlrroL
Post summary
Tweet announces CVE‑2026‑33549 with a medium severity rating but gives no additional technical details or mitigation information.
CVE-2026-33549 SPIP 4.4.10 through 4.4.12 before 4.4.13 allows unintended privilege assignment (of administrator privileges) during the editing of an author data structure because o… https://www.cve.org/CVERecord?id=CVE-2026-33549
Post summary
This post discloses a privilege escalation flaw in SPIP versions 4.4.10 to 4.4.12, where an attacker can gain administrator rights by editing an author data structure.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | spip | spip | - | - | - |