CVE-2026-77806 (CVSS 9.8) is a SPIP unauthenticated RCE exploited in the wild, with public exploit code now available. Update to SPIP 4.4.21 now. Related Posts: EverShop CVE-2026-72843 Flaw Allows Unauthenticated Account Takeover Spring Data REST and Spring AI Vulnerabilities: Four High-Severity Flaws Patched CVE-2026-75501: Public PoC for Calix Router Flaw That Bypasses NAT and Firewall Protections The post CVE-2026-77806: SPIP Unauthenticated RCE Exploited in the Wild as Public Exploit Land