by Kastro
Paper/Archive/CVE-2026-96408

CVE-2026-96408

Six Apart Ltd. Movable Type Cloud Edition — A code injection vulnerability exists in the upgrade script of Movable Type, which may allow an unauthenticated attacker to execute an ar…

EPSS 0.4%CVSS 9.4
critical.is priorityof 100
35
CVSS 9.4 (CNA)9.4 / 10 × 3028.2Not in CISA KEV+300.0EPSS percentile 35.8.358 × 207.2No public exploit+100.0SSVC exploitation: none+100.0
Description · from the CVE record

A code injection vulnerability exists in the upgrade script of Movable Type, which may allow an unauthenticated attacker to execute an arbitrary Perl script or an SQL query on the affected product.

Affected

ProductAffectedFixed inSource
Movable Type Cloud Edition9.2.0 – 9.2.1–CNA
Movable Type9.0.0 – 9.0.9–CNA
Movable Type8.8.0 – 8.8.5–CNA
Movable Type8.0.0 – 8.0.12–CNA
Movable Type Premium Cloud Edition9.2.0 – 9.2.1–CNA
Movable Type Premium9.0.0 – 9.0.9–CNA
Movable Type Premium2.0 – 2.17–CNA

Scores by source

jpcert (CNA)9.4CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:L
jpcert (CNA)9.3CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:L/SC:N/SI:N/SA:N
CISA ADPSSVCExploitation: none · Automatable: yes · Technical impact: total

References

refmovabletype.org/news/2026/10/mt-930-released.htmlrefsixapart.jp/movabletype/news/2026/10/07-1100.htmlrefjvn.jp/en/jp/JVN91153973