CVE Catalog
CVE-2026-48832
LowCVSS 3.5Exploitation Probability (EPSS)
Low risk0.19%
8th percentile - higher than 8% of all known CVEs
Summary
In SPIP before version 4.4.15, the file action/cookie.php in the ecrire directory is prone to an open redirect vulnerability.
Risk Assessment
The risk is that users can be redirected to malicious sites, potentially leading to phishing or credential theft.
Recommendation
Update SPIP to version 4.4.15 or later, which includes a fix for this vulnerability.
Original NVD description (English source)
action/cookie.php in ecrire in SPIP before 4.4.15 is prone to an open redirect vulnerability.