{"vulnerability": "cve-2026-72709", "sightings": [{"uuid": "bf4fe099-91b1-4107-bf6a-fed6c1453ce2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-72709", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/eezs3rf76rjy6", "content": "CVE-2026-72709 - SPIP\nCVE ID : CVE-2026-72709\n \n Published : 11. September 2026 16:38 | 19\u00a0Minuten ago\n \n Description : SPIP before 4.4.18 contains a missing authorization vulnerability in the administrative action endpoints under ecrire/action/ that allows unauthenticated att...", "creation_timestamp": "2026-09-11T17:18:00.330922Z"}, {"uuid": "35154c25-29fd-4ea9-9a74-684f54f1a747", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-72709", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mvb3rspmhl2b", "content": "CVE-2026-72709 - spip\nVersions of SPIP prior to 4.4.18 let an attacker who can get a special code reset the password of any account, including the admin. Because the system does not check if the user is allowed to do\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#spip #CVE #infosec", "creation_timestamp": "2026-09-11T17:30:09.419599Z"}, {"uuid": "b7d16834-05cb-4d0a-85e6-faf60defbf87", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-72709", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mvb5wzfnju2n", "content": "\ud83d\udea8 CVE-2026-72709 \u2014 CVSS 9.3 CRITICAL\n\nSPIP before 4.4.18 contains a missing authorization vulnerability in the administrative action endpoints un...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-72709\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-09-11T18:08:50.803593Z"}, {"uuid": "5f807666-689b-4836-998c-3bb602b27091", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-72709", "type": "seen", "source": "https://bsky.app/profile/vulnsea.com/post/3mvbl2goosk2q", "content": "\ud83c\udf0a ABYSSAL \u00b7 critical with a public exploit\nCVE-2026-72709: SPIP < 4.4.18 Missing Authorization via ecrire/action/ editer_auteur\nCVSS 9.8\nhttps://beta.vulnsea.com/cve/CVE-2026-72709\n\n#CVE #infosec #cybersecurity #threatintel", "creation_timestamp": "2026-09-11T22:03:24.569955Z"}, {"uuid": "82971ced-1a9b-424a-ac2a-b284f8f84ba2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-72709", "type": "seen", "source": "https://bsky.app/profile/vulnsea.com/post/3mvbrxxrgcx27", "content": "\ud83c\udf0a ABYSSAL \u00b7 critical with a public exploit\nCVE-2026-72709: SPIP before 4.4.18 contains a missing authorization vulnerability in the administrative action endpoints under ecrire/action/ that allows unauth\u2026\nCVSS 9.8\nhttps://beta.vulnsea.com/cve/CVE-2026-72709\n\n#CVE #infosec #cybersecurity #threatintel", "creation_timestamp": "2026-09-12T00:07:18.124678Z"}, {"uuid": "8ae5cfe2-ff97-4f2c-afa4-fc2853d24794", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-72709", "type": "seen", "source": "https://bsky.app/profile/vulnsea.com/post/3mvcgxbd35j2q", "content": "\ud83c\udf0a ABYSSAL \u00b7 critical with a public exploit\nCVE-2026-72709: SPIP < 4.4.18 Missing Authorization via ecrire/action/ editer_auteur\nCVSS 9.8\nhttps://beta.vulnsea.com/cve/CVE-2026-72709\n\n#CVE #infosec #cybersecurity #threatintel", "creation_timestamp": "2026-09-12T06:22:42.870247Z"}, {"uuid": "18ba1687-01f2-4128-9873-f53cbaece440", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-72709", "type": "seen", "source": "https://bsky.app/profile/vulnsea.com/post/3mvckngwk3b2z", "content": "\ud83c\udf0a ABYSSAL \u00b7 critical with a public exploit\nCVE-2026-72709: SPIP < 4.4.18 Missing Authorization via ecrire/action/ editer_auteur\nCVSS 9.8\nhttps://beta.vulnsea.com/cve/CVE-2026-72709\n\n#CVE #infosec #cybersecurity #threatintel", "creation_timestamp": "2026-09-12T07:28:47.849581Z"}, {"uuid": "a306df3d-af25-4317-b4f3-a13500cd60ec", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-72709", "type": "seen", "source": "https://bsky.app/profile/vulnsea.com/post/3mvcri74leb2t", "content": "\ud83c\udf0a ABYSSAL \u00b7 critical with a public exploit\nCVE-2026-72709: SPIP < 4.4.18 Missing Authorization via ecrire/action/ editer_auteur\nCVSS 9.8\nhttps://beta.vulnsea.com/cve/CVE-2026-72709\n\n#CVE #infosec #cybersecurity #threatintel", "creation_timestamp": "2026-09-12T09:31:08.365397Z"}, {"uuid": "9022a63f-e406-4953-808d-b0244cdde15b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-72709", "type": "seen", "source": "https://bsky.app/profile/vulnsea.com/post/3mvd7sglcql2z", "content": "\ud83c\udf0a ABYSSAL \u00b7 critical with a public exploit\nCVE-2026-72709: SPIP < 4.4.18 Missing Authorization via ecrire/action/ editer_auteur\nCVSS 9.8\nhttps://beta.vulnsea.com/cve/CVE-2026-72709\n\n#CVE #infosec #cybersecurity #threatintel", "creation_timestamp": "2026-09-12T13:47:25.396765Z"}, {"uuid": "f9cf827c-b00e-43c6-9552-cf1a222c8021", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-72709", "type": "seen", "source": "https://bsky.app/profile/vulnsea.com/post/3mvdglqdvni2z", "content": "\ud83c\udf0a ABYSSAL \u00b7 critical with a public exploit\nCVE-2026-72709: SPIP < 4.4.18 Missing Authorization via ecrire/action/ editer_auteur\nCVSS 9.8 \u00b7 EPSS 0.3%\nhttps://beta.vulnsea.com/cve/CVE-2026-72709\n\n#CVE #infosec #cybersecurity #threatintel", "creation_timestamp": "2026-09-12T15:48:56.097054Z"}, {"uuid": "f059df49-3b5a-4356-9316-6f5cc24ef0f2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-72709", "type": "seen", "source": "https://bsky.app/profile/vulnsea.com/post/3mvdvapbkx52i", "content": "\ud83c\udf0a ABYSSAL \u00b7 critical with a public exploit\nCVE-2026-72709: SPIP before 4.4.18 contains a missing authorization vulnerability in the administrative action endpoints under ecrire/action/ that allows unauth\u2026\nCVSS 9.8\nhttps://beta.vulnsea.com/cve/CVE-2026-72709\n\n#CVE #infosec #cybersecurity #threatintel", "creation_timestamp": "2026-09-12T20:11:12.165693Z"}, {"uuid": "9dbd1a34-ea63-4673-9bf4-5ef330efae9e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-72709", "type": "seen", "source": "https://bsky.app/profile/vulnsea.com/post/3mver6idefs2p", "content": "\ud83c\udf0a ABYSSAL \u00b7 critical with a public exploit\nCVE-2026-72709: SPIP before 4.4.18 contains a missing authorization vulnerability in the administrative action endpoints under ecrire/action/ that allows unauth\u2026\nCVSS 9.8\nhttps://beta.vulnsea.com/cve/CVE-2026-72709\n\n#CVE #infosec #cybersecurity #threatintel", "creation_timestamp": "2026-09-13T04:31:01.652393Z"}, {"uuid": "63cbdb88-a006-4c34-8be9-c7c138043007", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-72709", "type": "seen", "source": "https://bsky.app/profile/vulnsea.com/post/3mveyh4mvi22c", "content": "\ud83c\udf0a ABYSSAL \u00b7 critical with a public exploit\nCVE-2026-72709: SPIP < 4.4.18 Missing Authorization via ecrire/action/ editer_auteur\nCVSS 9.8 \u00b7 EPSS 0.3%\nhttps://beta.vulnsea.com/cve/CVE-2026-72709\n\n#CVE #infosec #cybersecurity #threatintel", "creation_timestamp": "2026-09-13T06:41:08.611333Z"}, {"uuid": "503ba884-c221-460a-b029-e3e51c212246", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-72709", "type": "seen", "source": "https://bsky.app/profile/vulnsea.com/post/3mvfgfc4txf2i", "content": "\ud83c\udf0a ABYSSAL \u00b7 critical with a public exploit\nCVE-2026-72709: SPIP < 4.4.18 Missing Authorization via ecrire/action/ editer_auteur\nCVSS 9.8 \u00b7 EPSS 0.3%\nhttps://beta.vulnsea.com/cve/CVE-2026-72709\n\n#CVE #infosec #cybersecurity #threatintel", "creation_timestamp": "2026-09-13T10:50:38.676955Z"}, {"uuid": "4b76c08c-1f3f-4767-b7c2-8f61774b7622", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-72709", "type": "seen", "source": "https://bsky.app/profile/vulnsea.com/post/3mvfjy3ektd2w", "content": "\ud83c\udf0a ABYSSAL \u00b7 critical with a public exploit\nCVE-2026-72709: SPIP < 4.4.18 Missing Authorization via ecrire/action/ editer_auteur\nCVSS 9.8 \u00b7 EPSS 0.3%\nhttps://beta.vulnsea.com/cve/CVE-2026-72709\n\n#CVE #infosec #cybersecurity #threatintel", "creation_timestamp": "2026-09-13T11:54:50.344439Z"}, {"uuid": "4ec1f494-608b-405e-91c7-11fd3d78c2b2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-72709", "type": "seen", "source": "https://bsky.app/profile/vulnsea.com/post/3mvgupyhwyu2z", "content": "\ud83c\udf0a ABYSSAL \u00b7 critical with a public exploit\nCVE-2026-72709: SPIP before 4.4.18 contains a missing authorization vulnerability in the administrative action endpoints under ecrire/action/ that allows unauth\u2026\nCVSS 9.8\nhttps://beta.vulnsea.com/cve/CVE-2026-72709\n\n#CVE #infosec #cybersecurity #threatintel", "creation_timestamp": "2026-09-14T00:39:49.802968Z"}]}