Tickets
1 CVEs
product
Monthly
Unauthenticated RCE in SPIP tickets plugin before 4.3.3 via code injection. Allows executing arbitrary PHP code without authentication. Patch available.
RCE
Tickets
NVD
CVSS 3.1
9.8
EPSS
0.4%
CVE-2026-27744
EPSS 0%
CVSS 9.8
CRITICAL
PATCH
Act Now
Unauthenticated RCE in SPIP tickets plugin before 4.3.3 via code injection. Allows executing arbitrary PHP code without authentication. Patch available.
RCE
Tickets
NVD