{"uuid": "6f526121-458d-4f03-bd92-e55a5a238bed", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-66738", "type": "seen", "source": "https://mastodon.social/users/hugovalters/statuses/117073701052682697", "content": "CVE-2026-66738 - Critical code injection in SPIP <4.4.18 via SQLite nav endpoint. Auth'd editors can RCE. CVSS 9.8. Unpatched - update/isolate now. #CVE #SPIP #infosec\nhttps://www.valtersit.com/cve/CVE-2026-66738/", "creation_timestamp": "2026-08-10T23:01:49.988722Z"}