Search
Find a vulnerability
Search criteria
4 vulnerabilities found for Movable Type Cloud Edition by Six Apart Ltd.
CVE-2026-96408 (GCVE-0-2026-96408)
Vulnerability from nvd – Published: 2026-10-07 10:18 – Updated: 2026-10-07 17:47
VLAI
EPSS
VEX
Summary
A code injection vulnerability exists in the upgrade script of Movable Type, which may allow an unauthenticated attacker to execute an arbitrary Perl script or an SQL query on the affected product.
Severity
9.4 (Critical)
SSVC
Exploitation: none
Automatable: yes
Technical Impact: total
CISA Coordinator · CISA-ADP (v2.0.3)
Decision recorded 2026-10-07 17:46 UTC
CWE
- CWE-94 - Code injection
Assigner
References
Impacted products
4 products
| Vendor | Product | Version | |
|---|---|---|---|
| Six Apart Ltd. | Movable Type Cloud Edition |
Affected:
9.2.0 , ≤ 9.2.1
(semver)
|
|
| Six Apart Ltd. | Movable Type |
Affected:
9.0.0 , ≤ 9.0.9
(semver)
Affected: 8.8.0 , ≤ 8.8.5 (semver) Affected: 8.0.0 , ≤ 8.0.12 (semver) |
|
| Six Apart Ltd. | Movable Type Premium Cloud Edition |
Affected:
9.2.0 , ≤ 9.2.1
(semver)
|
|
| Six Apart Ltd. | Movable Type Premium |
Affected:
9.0.0 , ≤ 9.0.9
(semver)
Affected: 2.0 , ≤ 2.17 (semver) |
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2026-96408",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "yes"
},
{
"Technical Impact": "total"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-10-07T17:46:25.099398Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2026-10-07T17:47:24.024Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"defaultStatus": "unaffected",
"product": "Movable Type Cloud Edition",
"vendor": "Six Apart Ltd.",
"versions": [
{
"lessThanOrEqual": "9.2.1",
"status": "affected",
"version": "9.2.0",
"versionType": "semver"
}
]
},
{
"defaultStatus": "unaffected",
"product": "Movable Type",
"vendor": "Six Apart Ltd.",
"versions": [
{
"lessThanOrEqual": "9.0.9",
"status": "affected",
"version": "9.0.0",
"versionType": "semver"
},
{
"lessThanOrEqual": "8.8.5",
"status": "affected",
"version": "8.8.0",
"versionType": "semver"
},
{
"lessThanOrEqual": "8.0.12",
"status": "affected",
"version": "8.0.0",
"versionType": "semver"
}
]
},
{
"defaultStatus": "unaffected",
"product": "Movable Type Premium Cloud Edition",
"vendor": "Six Apart Ltd.",
"versions": [
{
"lessThanOrEqual": "9.2.1",
"status": "affected",
"version": "9.2.0",
"versionType": "semver"
}
]
},
{
"defaultStatus": "unaffected",
"product": "Movable Type Premium",
"vendor": "Six Apart Ltd.",
"versions": [
{
"lessThanOrEqual": "9.0.9",
"status": "affected",
"version": "9.0.0",
"versionType": "semver"
},
{
"lessThanOrEqual": "2.17",
"status": "affected",
"version": "2.0",
"versionType": "semver"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "A code injection vulnerability exists in the upgrade script of Movable Type, which may allow an unauthenticated attacker to execute an arbitrary Perl script or an SQL query on the affected product."
}
],
"metrics": [
{
"cvssV3_0": {
"baseScore": 9.4,
"baseSeverity": "CRITICAL",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:L",
"version": "3.0"
},
"format": "CVSS",
"scenarios": [
{
"lang": "en-US",
"value": "GENERAL"
}
]
},
{
"cvssV4_0": {
"baseScore": 9.3,
"baseSeverity": "CRITICAL",
"vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:L/SC:N/SI:N/SA:N",
"version": "4.0"
},
"format": "CVSS",
"scenarios": [
{
"lang": "en-US",
"value": "GENERAL"
}
]
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-94",
"description": "Code injection",
"lang": "en-US",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-10-07T10:18:47.752Z",
"orgId": "ede6fdc4-6654-4307-a26d-3331c018e2ce",
"shortName": "jpcert"
},
"references": [
{
"url": "https://movabletype.org/news/2026/10/mt-930-released.html"
},
{
"url": "https://www.sixapart.jp/movabletype/news/2026/10/07-1100.html"
},
{
"url": "https://jvn.jp/en/jp/JVN91153973/"
}
]
}
},
"cveMetadata": {
"assignerOrgId": "ede6fdc4-6654-4307-a26d-3331c018e2ce",
"assignerShortName": "jpcert",
"cveId": "CVE-2026-96408",
"datePublished": "2026-10-07T10:18:47.752Z",
"dateReserved": "2026-10-02T04:23:48.464Z",
"dateUpdated": "2026-10-07T17:47:24.024Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-103668 (GCVE-0-2026-103668)
Vulnerability from nvd – Published: 2026-10-07 10:19 – Updated: 2026-10-07 17:46
VLAI
EPSS
VEX
Summary
An SQL Injection vulnerability exists in the Site Search function of Movable Type, which may allow an unauthenticated attacker to execute an arbitrary SQL query on the affected product.
Severity
SSVC
Exploitation: none
Automatable: yes
Technical Impact: partial
CISA Coordinator · CISA-ADP (v2.0.3)
Decision recorded 2026-10-07 17:45 UTC
CWE
- CWE-89 - Improper neutralization of special elements used in an SQL command ('SQL Injection')
Assigner
References
Impacted products
4 products
| Vendor | Product | Version | |
|---|---|---|---|
| Six Apart Ltd. | Movable Type Cloud Edition |
Affected:
9.2.0 , ≤ 9.2.1
(semver)
|
|
| Six Apart Ltd. | Movable Type |
Affected:
9.0.0 , ≤ 9.0.9
(semver)
Affected: 8.8.0 , ≤ 8.8.5 (semver) Affected: 8.0.0 , ≤ 8.0.12 (semver) |
|
| Six Apart Ltd. | Movable Type Premium Cloud Edition |
Affected:
9.2.0 , ≤ 9.2.1
(semver)
|
|
| Six Apart Ltd. | Movable Type Premium |
Affected:
9.0.0 , ≤ 9.0.9
(semver)
Affected: 2.0 , ≤ 2.17 (semver) |
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2026-103668",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "yes"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-10-07T17:45:40.718449Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2026-10-07T17:46:03.432Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"defaultStatus": "unaffected",
"product": "Movable Type Cloud Edition",
"vendor": "Six Apart Ltd.",
"versions": [
{
"lessThanOrEqual": "9.2.1",
"status": "affected",
"version": "9.2.0",
"versionType": "semver"
}
]
},
{
"defaultStatus": "unaffected",
"product": "Movable Type",
"vendor": "Six Apart Ltd.",
"versions": [
{
"lessThanOrEqual": "9.0.9",
"status": "affected",
"version": "9.0.0",
"versionType": "semver"
},
{
"lessThanOrEqual": "8.8.5",
"status": "affected",
"version": "8.8.0",
"versionType": "semver"
},
{
"lessThanOrEqual": "8.0.12",
"status": "affected",
"version": "8.0.0",
"versionType": "semver"
}
]
},
{
"defaultStatus": "unaffected",
"product": "Movable Type Premium Cloud Edition",
"vendor": "Six Apart Ltd.",
"versions": [
{
"lessThanOrEqual": "9.2.1",
"status": "affected",
"version": "9.2.0",
"versionType": "semver"
}
]
},
{
"defaultStatus": "unaffected",
"product": "Movable Type Premium",
"vendor": "Six Apart Ltd.",
"versions": [
{
"lessThanOrEqual": "9.0.9",
"status": "affected",
"version": "9.0.0",
"versionType": "semver"
},
{
"lessThanOrEqual": "2.17",
"status": "affected",
"version": "2.0",
"versionType": "semver"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "An SQL Injection vulnerability exists in the Site Search function of Movable Type, which may allow an unauthenticated attacker to execute an arbitrary SQL query on the affected product."
}
],
"metrics": [
{
"cvssV3_0": {
"baseScore": 8.6,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:L",
"version": "3.0"
},
"format": "CVSS",
"scenarios": [
{
"lang": "en-US",
"value": "GENERAL"
}
]
},
{
"cvssV4_0": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:L/VA:L/SC:N/SI:N/SA:N",
"version": "4.0"
},
"format": "CVSS",
"scenarios": [
{
"lang": "en-US",
"value": "GENERAL"
}
]
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-89",
"description": "Improper neutralization of special elements used in an SQL command (\u0027SQL Injection\u0027)",
"lang": "en-US",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-10-07T10:19:10.413Z",
"orgId": "ede6fdc4-6654-4307-a26d-3331c018e2ce",
"shortName": "jpcert"
},
"references": [
{
"url": "https://movabletype.org/news/2026/10/mt-930-released.html"
},
{
"url": "https://www.sixapart.jp/movabletype/news/2026/10/07-1100.html"
},
{
"url": "https://jvn.jp/en/jp/JVN91153973/"
}
]
}
},
"cveMetadata": {
"assignerOrgId": "ede6fdc4-6654-4307-a26d-3331c018e2ce",
"assignerShortName": "jpcert",
"cveId": "CVE-2026-103668",
"datePublished": "2026-10-07T10:19:10.413Z",
"dateReserved": "2026-10-02T04:23:47.663Z",
"dateUpdated": "2026-10-07T17:46:03.432Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-103668 (GCVE-0-2026-103668)
Vulnerability from cvelistv5 – Published: 2026-10-07 10:19 – Updated: 2026-10-07 17:46
VLAI
EPSS
VEX
Summary
An SQL Injection vulnerability exists in the Site Search function of Movable Type, which may allow an unauthenticated attacker to execute an arbitrary SQL query on the affected product.
Severity
SSVC
Exploitation: none
Automatable: yes
Technical Impact: partial
CISA Coordinator · CISA-ADP (v2.0.3)
Decision recorded 2026-10-07 17:45 UTC
CWE
- CWE-89 - Improper neutralization of special elements used in an SQL command ('SQL Injection')
Assigner
References
Impacted products
4 products
| Vendor | Product | Version | |
|---|---|---|---|
| Six Apart Ltd. | Movable Type Cloud Edition |
Affected:
9.2.0 , ≤ 9.2.1
(semver)
|
|
| Six Apart Ltd. | Movable Type |
Affected:
9.0.0 , ≤ 9.0.9
(semver)
Affected: 8.8.0 , ≤ 8.8.5 (semver) Affected: 8.0.0 , ≤ 8.0.12 (semver) |
|
| Six Apart Ltd. | Movable Type Premium Cloud Edition |
Affected:
9.2.0 , ≤ 9.2.1
(semver)
|
|
| Six Apart Ltd. | Movable Type Premium |
Affected:
9.0.0 , ≤ 9.0.9
(semver)
Affected: 2.0 , ≤ 2.17 (semver) |
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2026-103668",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "yes"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-10-07T17:45:40.718449Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2026-10-07T17:46:03.432Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"defaultStatus": "unaffected",
"product": "Movable Type Cloud Edition",
"vendor": "Six Apart Ltd.",
"versions": [
{
"lessThanOrEqual": "9.2.1",
"status": "affected",
"version": "9.2.0",
"versionType": "semver"
}
]
},
{
"defaultStatus": "unaffected",
"product": "Movable Type",
"vendor": "Six Apart Ltd.",
"versions": [
{
"lessThanOrEqual": "9.0.9",
"status": "affected",
"version": "9.0.0",
"versionType": "semver"
},
{
"lessThanOrEqual": "8.8.5",
"status": "affected",
"version": "8.8.0",
"versionType": "semver"
},
{
"lessThanOrEqual": "8.0.12",
"status": "affected",
"version": "8.0.0",
"versionType": "semver"
}
]
},
{
"defaultStatus": "unaffected",
"product": "Movable Type Premium Cloud Edition",
"vendor": "Six Apart Ltd.",
"versions": [
{
"lessThanOrEqual": "9.2.1",
"status": "affected",
"version": "9.2.0",
"versionType": "semver"
}
]
},
{
"defaultStatus": "unaffected",
"product": "Movable Type Premium",
"vendor": "Six Apart Ltd.",
"versions": [
{
"lessThanOrEqual": "9.0.9",
"status": "affected",
"version": "9.0.0",
"versionType": "semver"
},
{
"lessThanOrEqual": "2.17",
"status": "affected",
"version": "2.0",
"versionType": "semver"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "An SQL Injection vulnerability exists in the Site Search function of Movable Type, which may allow an unauthenticated attacker to execute an arbitrary SQL query on the affected product."
}
],
"metrics": [
{
"cvssV3_0": {
"baseScore": 8.6,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:L",
"version": "3.0"
},
"format": "CVSS",
"scenarios": [
{
"lang": "en-US",
"value": "GENERAL"
}
]
},
{
"cvssV4_0": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:L/VA:L/SC:N/SI:N/SA:N",
"version": "4.0"
},
"format": "CVSS",
"scenarios": [
{
"lang": "en-US",
"value": "GENERAL"
}
]
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-89",
"description": "Improper neutralization of special elements used in an SQL command (\u0027SQL Injection\u0027)",
"lang": "en-US",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-10-07T10:19:10.413Z",
"orgId": "ede6fdc4-6654-4307-a26d-3331c018e2ce",
"shortName": "jpcert"
},
"references": [
{
"url": "https://movabletype.org/news/2026/10/mt-930-released.html"
},
{
"url": "https://www.sixapart.jp/movabletype/news/2026/10/07-1100.html"
},
{
"url": "https://jvn.jp/en/jp/JVN91153973/"
}
]
}
},
"cveMetadata": {
"assignerOrgId": "ede6fdc4-6654-4307-a26d-3331c018e2ce",
"assignerShortName": "jpcert",
"cveId": "CVE-2026-103668",
"datePublished": "2026-10-07T10:19:10.413Z",
"dateReserved": "2026-10-02T04:23:47.663Z",
"dateUpdated": "2026-10-07T17:46:03.432Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-96408 (GCVE-0-2026-96408)
Vulnerability from cvelistv5 – Published: 2026-10-07 10:18 – Updated: 2026-10-07 17:47
VLAI
EPSS
VEX
Summary
A code injection vulnerability exists in the upgrade script of Movable Type, which may allow an unauthenticated attacker to execute an arbitrary Perl script or an SQL query on the affected product.
Severity
9.4 (Critical)
SSVC
Exploitation: none
Automatable: yes
Technical Impact: total
CISA Coordinator · CISA-ADP (v2.0.3)
Decision recorded 2026-10-07 17:46 UTC
CWE
- CWE-94 - Code injection
Assigner
References
Impacted products
4 products
| Vendor | Product | Version | |
|---|---|---|---|
| Six Apart Ltd. | Movable Type Cloud Edition |
Affected:
9.2.0 , ≤ 9.2.1
(semver)
|
|
| Six Apart Ltd. | Movable Type |
Affected:
9.0.0 , ≤ 9.0.9
(semver)
Affected: 8.8.0 , ≤ 8.8.5 (semver) Affected: 8.0.0 , ≤ 8.0.12 (semver) |
|
| Six Apart Ltd. | Movable Type Premium Cloud Edition |
Affected:
9.2.0 , ≤ 9.2.1
(semver)
|
|
| Six Apart Ltd. | Movable Type Premium |
Affected:
9.0.0 , ≤ 9.0.9
(semver)
Affected: 2.0 , ≤ 2.17 (semver) |
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2026-96408",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "yes"
},
{
"Technical Impact": "total"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-10-07T17:46:25.099398Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2026-10-07T17:47:24.024Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"defaultStatus": "unaffected",
"product": "Movable Type Cloud Edition",
"vendor": "Six Apart Ltd.",
"versions": [
{
"lessThanOrEqual": "9.2.1",
"status": "affected",
"version": "9.2.0",
"versionType": "semver"
}
]
},
{
"defaultStatus": "unaffected",
"product": "Movable Type",
"vendor": "Six Apart Ltd.",
"versions": [
{
"lessThanOrEqual": "9.0.9",
"status": "affected",
"version": "9.0.0",
"versionType": "semver"
},
{
"lessThanOrEqual": "8.8.5",
"status": "affected",
"version": "8.8.0",
"versionType": "semver"
},
{
"lessThanOrEqual": "8.0.12",
"status": "affected",
"version": "8.0.0",
"versionType": "semver"
}
]
},
{
"defaultStatus": "unaffected",
"product": "Movable Type Premium Cloud Edition",
"vendor": "Six Apart Ltd.",
"versions": [
{
"lessThanOrEqual": "9.2.1",
"status": "affected",
"version": "9.2.0",
"versionType": "semver"
}
]
},
{
"defaultStatus": "unaffected",
"product": "Movable Type Premium",
"vendor": "Six Apart Ltd.",
"versions": [
{
"lessThanOrEqual": "9.0.9",
"status": "affected",
"version": "9.0.0",
"versionType": "semver"
},
{
"lessThanOrEqual": "2.17",
"status": "affected",
"version": "2.0",
"versionType": "semver"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "A code injection vulnerability exists in the upgrade script of Movable Type, which may allow an unauthenticated attacker to execute an arbitrary Perl script or an SQL query on the affected product."
}
],
"metrics": [
{
"cvssV3_0": {
"baseScore": 9.4,
"baseSeverity": "CRITICAL",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:L",
"version": "3.0"
},
"format": "CVSS",
"scenarios": [
{
"lang": "en-US",
"value": "GENERAL"
}
]
},
{
"cvssV4_0": {
"baseScore": 9.3,
"baseSeverity": "CRITICAL",
"vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:L/SC:N/SI:N/SA:N",
"version": "4.0"
},
"format": "CVSS",
"scenarios": [
{
"lang": "en-US",
"value": "GENERAL"
}
]
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-94",
"description": "Code injection",
"lang": "en-US",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-10-07T10:18:47.752Z",
"orgId": "ede6fdc4-6654-4307-a26d-3331c018e2ce",
"shortName": "jpcert"
},
"references": [
{
"url": "https://movabletype.org/news/2026/10/mt-930-released.html"
},
{
"url": "https://www.sixapart.jp/movabletype/news/2026/10/07-1100.html"
},
{
"url": "https://jvn.jp/en/jp/JVN91153973/"
}
]
}
},
"cveMetadata": {
"assignerOrgId": "ede6fdc4-6654-4307-a26d-3331c018e2ce",
"assignerShortName": "jpcert",
"cveId": "CVE-2026-96408",
"datePublished": "2026-10-07T10:18:47.752Z",
"dateReserved": "2026-10-02T04:23:48.464Z",
"dateUpdated": "2026-10-07T17:47:24.024Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}