CVE-2026-8429: SPIP < 4.4.14 Remote Code Execution via Private Space
SPIP versions prior to 4.4.14 contain a remote code execution vulnerability in the private space that allows attackers to execute arbitrary code in the context of the web server. Attackers can exploit this vulnerability to achieve code execution that bypasses the SPIP security screen protections.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
SPIPto a version that resolves this vulnerability.Fixed in 4.4.14
Event History
Frequently Asked Questions
What is the severity of CVE-2026-8429?
CVE-2026-8429 is classified as a critical vulnerability due to its potential for remote code execution.
How do I fix CVE-2026-8429?
To fix CVE-2026-8429, upgrade SPIP to version 4.4.14 or later.
Who is affected by CVE-2026-8429?
CVE-2026-8429 affects all SPIP versions prior to 4.4.14.
What type of vulnerability is CVE-2026-8429?
CVE-2026-8429 is a remote code execution vulnerability.
What can attackers do with CVE-2026-8429?
Attackers can exploit CVE-2026-8429 to execute arbitrary code in the context of the web server.