by Kastro
Paper/Archive/CVE-2026-33088

CVE-2026-33088

Six Apart Ltd. Movable Type — Movable Type provided by Six Apart Ltd.

EPSS 0.3%CVSS 9.8
critical.is priorityof 100
35
CVSS 9.8 (NVD)9.8 / 10 × 3029.4Not in CISA KEV+300.0EPSS percentile 28.6.286 × 205.7No public exploit+100.0SSVC exploitation: none+100.0
Description · from the CVE record

Movable Type provided by Six Apart Ltd. contains an SQL Injection vulnerability which may allow an attacker to execute an arbitrary SQL statement.

Affected

ProductAffectedFixed inSource
Movable Type9.1.0 and earlier–CNA
Movable Type9.0.6 and earlier–CNA
Movable Type8.8.2 and earlier–CNA
Movable Type8.0.9 and earlier–CNA
Movable Type Advanced9.1.0 and earlier–CNA
Movable Type Advanced9.0.6 and earlier–CNA
Movable Type Advanced8.8.2 and earlier–CNA
Movable Type Advanced8.0.9 and earlier–CNA
Movable Type Premium9.1.0 and earlier–CNA
Movable Type Premium9.0.6 and earlier–CNA
Movable Type Premium Advanced Edition9.1.0 and earlier–CNA
Movable Type Premium Advanced Edition9.0.6 and earlier–CNA

Scores by source

NVD9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
jpcert (CNA)7.3CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
jpcert (CNA)6.9CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N
CISA ADPSSVCExploitation: none · Automatable: yes · Technical impact: partial

References

refmovabletype.org/news/2026/04/mt-907-released.htmlrefsixapart.jp/movabletype/news/2026/04/08-1100.htmlrefjvn.jp/en/jp/JVN66473735