VULNERABILITY INTELLIGENCE

CVE-2026-33549

CVSS score6.7 MEDIUM
EPSS probability0.24%
CISA KEVNot currently listed
Published2026-03-22
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:L

Description

SPIP 4.4.10 through 4.4.12 before 4.4.13 allows unintended privilege assignment (of administrator privileges) during the editing of an author data structure because of STATUT mishandling.

Weakness classification

  • cve@mitre.org: CWE-688

Primary references