CVE-2026-66738 | SPIP up to 4.4.17 Navigation Menu Endpoint code injection

August 10, 2026 Yanac

A vulnerability was found in SPIP up to 4.4.17 and classified as critical. This vulnerability affects unknown code of the component Navigation Menu Endpoint. The manipulation results in code injection.

This vulnerability is known as CVE-2026-66738. It is possible to launch the attack remotely. No exploit is available.

It is suggested to upgrade the affected component.VulDB Recent EntriesRead More