Vulnerability-Lookup

CVE-2026-33088 (GCVE-0-2026-33088)

Vulnerability from cvelistv5 – Published: 2026-04-08 08:51 – Updated: 2026-04-08 13:31

Summary

Movable Type provided by Six Apart Ltd. contains an SQL Injection vulnerability which may allow an attacker to execute an arbitrary SQL statement.

Severity ?

7.3 (High)


                        
                          CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L

6.9 (Medium)


                        
                          CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N

CWE

CWE-89 - Improper neutralization of special elements used in an SQL command ('SQL Injection')

Assigner

jpcert

References

URL

Tags

	https://movabletype.org/news/2026/04/mt-907-relea…
	https://www.sixapart.jp/movabletype/news/2026/04/…
	https://jvn.jp/en/jp/JVN66473735/

Impacted products

Vendor

Product

Version

Six Apart Ltd.

Movable Type

Affected: 9.1.0 and earlier

Six Apart Ltd.	Movable Type	Affected: 9.0.6 and earlier
Six Apart Ltd.	Movable Type	Affected: 8.8.2 and earlier
Six Apart Ltd.	Movable Type	Affected: 8.0.9 and earlier
Six Apart Ltd.	Movable Type Advanced	Affected: 9.1.0 and earlier
Six Apart Ltd.	Movable Type Advanced	Affected: 9.0.6 and earlier
Six Apart Ltd.	Movable Type Advanced	Affected: 8.8.2 and earlier
Six Apart Ltd.	Movable Type Advanced	Affected: 8.0.9 and earlier
Six Apart Ltd.	Movable Type Premium	Affected: 9.1.0 and earlier
Six Apart Ltd.	Movable Type Premium	Affected: 9.0.6 and earlier
Six Apart Ltd.	Movable Type Premium Advanced Edition	Affected: 9.1.0 and earlier
Six Apart Ltd.	Movable Type Premium Advanced Edition	Affected: 9.0.6 and earlier
Six Apart Ltd.	Movable Type Premium	Affected: 2.14 and earlier
Six Apart Ltd.	Movable Type Premium Advanced Edition	Affected: 2.14 and earlier
Six Apart Ltd.	Movable Type Premium (MT8-based)	Affected: 2.14 and earlier
Six Apart Ltd.	Movable Type	Affected: 5.1 to 5.18
Six Apart Ltd.	Movable Type	Affected: 5.2 Affected: 5.2.1 to 5.2.13
Six Apart Ltd.	Movable Type	Affected: 6.0 Affected: 6.0.1 to 6.8.8
Six Apart Ltd.	Movable Type	Affected: 7 r.4207 to r.5510
Six Apart Ltd.	Movable Type	Affected: 8.4.0 to 8.4.4
Six Apart Ltd.	Movable Type	Affected: 1.0 to 1.68

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-33088",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "yes"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-04-08T13:31:00.450725Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-04-08T13:31:08.213Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "Movable Type",
          "vendor": "Six Apart Ltd.",
          "versions": [
            {
              "status": "affected",
              "version": "9.1.0 and earlier"
            }
          ]
        },
        {
          "product": "Movable Type",
          "vendor": "Six Apart Ltd.",
          "versions": [
            {
              "status": "affected",
              "version": "9.0.6 and earlier"
            }
          ]
        },
        {
          "product": "Movable Type",
          "vendor": "Six Apart Ltd.",
          "versions": [
            {
              "status": "affected",
              "version": "8.8.2 and earlier"
            }
          ]
        },
        {
          "product": "Movable Type",
          "vendor": "Six Apart Ltd.",
          "versions": [
            {
              "status": "affected",
              "version": "8.0.9 and earlier"
            }
          ]
        },
        {
          "product": "Movable Type Advanced",
          "vendor": "Six Apart Ltd.",
          "versions": [
            {
              "status": "affected",
              "version": "9.1.0 and earlier"
            }
          ]
        },
        {
          "product": "Movable Type Advanced",
          "vendor": "Six Apart Ltd.",
          "versions": [
            {
              "status": "affected",
              "version": "9.0.6 and earlier"
            }
          ]
        },
        {
          "product": "Movable Type Advanced",
          "vendor": "Six Apart Ltd.",
          "versions": [
            {
              "status": "affected",
              "version": "8.8.2 and earlier"
            }
          ]
        },
        {
          "product": "Movable Type Advanced",
          "vendor": "Six Apart Ltd.",
          "versions": [
            {
              "status": "affected",
              "version": "8.0.9 and earlier"
            }
          ]
        },
        {
          "product": "Movable Type Premium",
          "vendor": "Six Apart Ltd.",
          "versions": [
            {
              "status": "affected",
              "version": "9.1.0 and earlier"
            }
          ]
        },
        {
          "product": "Movable Type Premium",
          "vendor": "Six Apart Ltd.",
          "versions": [
            {
              "status": "affected",
              "version": "9.0.6 and earlier"
            }
          ]
        },
        {
          "product": "Movable Type Premium Advanced Edition",
          "vendor": "Six Apart Ltd.",
          "versions": [
            {
              "status": "affected",
              "version": "9.1.0 and earlier"
            }
          ]
        },
        {
          "product": "Movable Type Premium Advanced Edition",
          "vendor": "Six Apart Ltd.",
          "versions": [
            {
              "status": "affected",
              "version": "9.0.6 and earlier"
            }
          ]
        },
        {
          "product": "Movable Type Premium",
          "vendor": "Six Apart Ltd.",
          "versions": [
            {
              "status": "affected",
              "version": "2.14 and earlier"
            }
          ]
        },
        {
          "product": "Movable Type Premium Advanced Edition",
          "vendor": "Six Apart Ltd.",
          "versions": [
            {
              "status": "affected",
              "version": "2.14 and earlier"
            }
          ]
        },
        {
          "product": "Movable Type Premium (MT8-based)",
          "vendor": "Six Apart Ltd.",
          "versions": [
            {
              "status": "affected",
              "version": "2.14 and earlier"
            }
          ]
        },
        {
          "product": "Movable Type",
          "vendor": "Six Apart Ltd.",
          "versions": [
            {
              "status": "affected",
              "version": "5.1 to 5.18"
            }
          ]
        },
        {
          "product": "Movable Type",
          "vendor": "Six Apart Ltd.",
          "versions": [
            {
              "status": "affected",
              "version": "5.2"
            },
            {
              "status": "affected",
              "version": "5.2.1 to 5.2.13"
            }
          ]
        },
        {
          "product": "Movable Type",
          "vendor": "Six Apart Ltd.",
          "versions": [
            {
              "status": "affected",
              "version": "6.0"
            },
            {
              "status": "affected",
              "version": "6.0.1 to 6.8.8"
            }
          ]
        },
        {
          "product": "Movable Type",
          "vendor": "Six Apart Ltd.",
          "versions": [
            {
              "status": "affected",
              "version": "7 r.4207 to r.5510"
            }
          ]
        },
        {
          "product": "Movable Type",
          "vendor": "Six Apart Ltd.",
          "versions": [
            {
              "status": "affected",
              "version": "8.4.0 to 8.4.4"
            }
          ]
        },
        {
          "product": "Movable Type",
          "vendor": "Six Apart Ltd.",
          "versions": [
            {
              "status": "affected",
              "version": "1.0 to 1.68"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "Movable Type provided by Six Apart Ltd. contains an SQL Injection vulnerability which may allow an attacker to execute an arbitrary SQL statement."
        }
      ],
      "metrics": [
        {
          "cvssV3_0": {
            "baseScore": 7.3,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L",
            "version": "3.0"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en-US",
              "value": "GENERAL"
            }
          ]
        },
        {
          "cvssV4_0": {
            "baseScore": 6.9,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N",
            "version": "4.0"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en-US",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-89",
              "description": "Improper neutralization of special elements used in an SQL command (\u0027SQL Injection\u0027)",
              "lang": "en-US",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-04-08T08:51:45.916Z",
        "orgId": "ede6fdc4-6654-4307-a26d-3331c018e2ce",
        "shortName": "jpcert"
      },
      "references": [
        {
          "url": "https://movabletype.org/news/2026/04/mt-907-released.html"
        },
        {
          "url": "https://www.sixapart.jp/movabletype/news/2026/04/08-1100.html"
        },
        {
          "url": "https://jvn.jp/en/jp/JVN66473735/"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "ede6fdc4-6654-4307-a26d-3331c018e2ce",
    "assignerShortName": "jpcert",
    "cveId": "CVE-2026-33088",
    "datePublished": "2026-04-08T08:51:45.916Z",
    "dateReserved": "2026-03-26T01:06:13.982Z",
    "dateUpdated": "2026-04-08T13:31:08.213Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2",
  "vulnerability-lookup:meta": {
    "nvd": "{\"cve\":{\"id\":\"CVE-2026-33088\",\"sourceIdentifier\":\"vultures@jpcert.or.jp\",\"published\":\"2026-04-08T09:16:21.213\",\"lastModified\":\"2026-04-08T21:26:35.910\",\"vulnStatus\":\"Awaiting Analysis\",\"cveTags\":[],\"descriptions\":[{\"lang\":\"en\",\"value\":\"Movable Type provided by Six Apart Ltd. contains an SQL Injection vulnerability which may allow an attacker to execute an arbitrary SQL statement.\"}],\"metrics\":{\"cvssMetricV40\":[{\"source\":\"vultures@jpcert.or.jp\",\"type\":\"Secondary\",\"cvssData\":{\"version\":\"4.0\",\"vectorString\":\"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X\",\"baseScore\":6.9,\"baseSeverity\":\"MEDIUM\",\"attackVector\":\"NETWORK\",\"attackComplexity\":\"LOW\",\"attackRequirements\":\"NONE\",\"privilegesRequired\":\"NONE\",\"userInteraction\":\"NONE\",\"vulnConfidentialityImpact\":\"LOW\",\"vulnIntegrityImpact\":\"LOW\",\"vulnAvailabilityImpact\":\"LOW\",\"subConfidentialityImpact\":\"NONE\",\"subIntegrityImpact\":\"NONE\",\"subAvailabilityImpact\":\"NONE\",\"exploitMaturity\":\"NOT_DEFINED\",\"confidentialityRequirement\":\"NOT_DEFINED\",\"integrityRequirement\":\"NOT_DEFINED\",\"availabilityRequirement\":\"NOT_DEFINED\",\"modifiedAttackVector\":\"NOT_DEFINED\",\"modifiedAttackComplexity\":\"NOT_DEFINED\",\"modifiedAttackRequirements\":\"NOT_DEFINED\",\"modifiedPrivilegesRequired\":\"NOT_DEFINED\",\"modifiedUserInteraction\":\"NOT_DEFINED\",\"modifiedVulnConfidentialityImpact\":\"NOT_DEFINED\",\"modifiedVulnIntegrityImpact\":\"NOT_DEFINED\",\"modifiedVulnAvailabilityImpact\":\"NOT_DEFINED\",\"modifiedSubConfidentialityImpact\":\"NOT_DEFINED\",\"modifiedSubIntegrityImpact\":\"NOT_DEFINED\",\"modifiedSubAvailabilityImpact\":\"NOT_DEFINED\",\"Safety\":\"NOT_DEFINED\",\"Automatable\":\"NOT_DEFINED\",\"Recovery\":\"NOT_DEFINED\",\"valueDensity\":\"NOT_DEFINED\",\"vulnerabilityResponseEffort\":\"NOT_DEFINED\",\"providerUrgency\":\"NOT_DEFINED\"}}],\"cvssMetricV30\":[{\"source\":\"vultures@jpcert.or.jp\",\"type\":\"Secondary\",\"cvssData\":{\"version\":\"3.0\",\"vectorString\":\"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L\",\"baseScore\":7.3,\"baseSeverity\":\"HIGH\",\"attackVector\":\"NETWORK\",\"attackComplexity\":\"LOW\",\"privilegesRequired\":\"NONE\",\"userInteraction\":\"NONE\",\"scope\":\"UNCHANGED\",\"confidentialityImpact\":\"LOW\",\"integrityImpact\":\"LOW\",\"availabilityImpact\":\"LOW\"},\"exploitabilityScore\":3.9,\"impactScore\":3.4}]},\"weaknesses\":[{\"source\":\"vultures@jpcert.or.jp\",\"type\":\"Primary\",\"description\":[{\"lang\":\"en\",\"value\":\"CWE-89\"}]}],\"references\":[{\"url\":\"https://jvn.jp/en/jp/JVN66473735/\",\"source\":\"vultures@jpcert.or.jp\"},{\"url\":\"https://movabletype.org/news/2026/04/mt-907-released.html\",\"source\":\"vultures@jpcert.or.jp\"},{\"url\":\"https://www.sixapart.jp/movabletype/news/2026/04/08-1100.html\",\"source\":\"vultures@jpcert.or.jp\"}]}}",
    "vulnrichment": {
      "containers": "{\"adp\": [{\"title\": \"CISA ADP Vulnrichment\", \"metrics\": [{\"other\": {\"type\": \"ssvc\", \"content\": {\"id\": \"CVE-2026-33088\", \"role\": \"CISA Coordinator\", \"options\": [{\"Exploitation\": \"none\"}, {\"Automatable\": \"yes\"}, {\"Technical Impact\": \"partial\"}], \"version\": \"2.0.3\", \"timestamp\": \"2026-04-08T13:31:00.450725Z\"}}}], \"providerMetadata\": {\"orgId\": \"134c704f-9b21-4f2e-91b3-4a467353bcc0\", \"shortName\": \"CISA-ADP\", \"dateUpdated\": \"2026-04-08T13:31:04.830Z\"}}], \"cna\": {\"metrics\": [{\"format\": \"CVSS\", \"cvssV3_0\": {\"version\": \"3.0\", \"baseScore\": 7.3, \"baseSeverity\": \"HIGH\", \"vectorString\": \"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L\"}, \"scenarios\": [{\"lang\": \"en-US\", \"value\": \"GENERAL\"}]}, {\"format\": \"CVSS\", \"cvssV4_0\": {\"version\": \"4.0\", \"baseScore\": 6.9, \"baseSeverity\": \"MEDIUM\", \"vectorString\": \"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N\"}, \"scenarios\": [{\"lang\": \"en-US\", \"value\": \"GENERAL\"}]}], \"affected\": [{\"vendor\": \"Six Apart Ltd.\", \"product\": \"Movable Type\", \"versions\": [{\"status\": \"affected\", \"version\": \"9.1.0 and earlier\"}]}, {\"vendor\": \"Six Apart Ltd.\", \"product\": \"Movable Type\", \"versions\": [{\"status\": \"affected\", \"version\": \"9.0.6 and earlier\"}]}, {\"vendor\": \"Six Apart Ltd.\", \"product\": \"Movable Type\", \"versions\": [{\"status\": \"affected\", \"version\": \"8.8.2 and earlier\"}]}, {\"vendor\": \"Six Apart Ltd.\", \"product\": \"Movable Type\", \"versions\": [{\"status\": \"affected\", \"version\": \"8.0.9 and earlier\"}]}, {\"vendor\": \"Six Apart Ltd.\", \"product\": \"Movable Type Advanced\", \"versions\": [{\"status\": \"affected\", \"version\": \"9.1.0 and earlier\"}]}, {\"vendor\": \"Six Apart Ltd.\", \"product\": \"Movable Type Advanced\", \"versions\": [{\"status\": \"affected\", \"version\": \"9.0.6 and earlier\"}]}, {\"vendor\": \"Six Apart Ltd.\", \"product\": \"Movable Type Advanced\", \"versions\": [{\"status\": \"affected\", \"version\": \"8.8.2 and earlier\"}]}, {\"vendor\": \"Six Apart Ltd.\", \"product\": \"Movable Type Advanced\", \"versions\": [{\"status\": \"affected\", \"version\": \"8.0.9 and earlier\"}]}, {\"vendor\": \"Six Apart Ltd.\", \"product\": \"Movable Type Premium\", \"versions\": [{\"status\": \"affected\", \"version\": \"9.1.0 and earlier\"}]}, {\"vendor\": \"Six Apart Ltd.\", \"product\": \"Movable Type Premium\", \"versions\": [{\"status\": \"affected\", \"version\": \"9.0.6 and earlier\"}]}, {\"vendor\": \"Six Apart Ltd.\", \"product\": \"Movable Type Premium Advanced Edition\", \"versions\": [{\"status\": \"affected\", \"version\": \"9.1.0 and earlier\"}]}, {\"vendor\": \"Six Apart Ltd.\", \"product\": \"Movable Type Premium Advanced Edition\", \"versions\": [{\"status\": \"affected\", \"version\": \"9.0.6 and earlier\"}]}, {\"vendor\": \"Six Apart Ltd.\", \"product\": \"Movable Type Premium\", \"versions\": [{\"status\": \"affected\", \"version\": \"2.14 and earlier\"}]}, {\"vendor\": \"Six Apart Ltd.\", \"product\": \"Movable Type Premium Advanced Edition\", \"versions\": [{\"status\": \"affected\", \"version\": \"2.14 and earlier\"}]}, {\"vendor\": \"Six Apart Ltd.\", \"product\": \"Movable Type Premium (MT8-based)\", \"versions\": [{\"status\": \"affected\", \"version\": \"2.14 and earlier\"}]}, {\"vendor\": \"Six Apart Ltd.\", \"product\": \"Movable Type\", \"versions\": [{\"status\": \"affected\", \"version\": \"5.1 to 5.18\"}]}, {\"vendor\": \"Six Apart Ltd.\", \"product\": \"Movable Type\", \"versions\": [{\"status\": \"affected\", \"version\": \"5.2\"}, {\"status\": \"affected\", \"version\": \"5.2.1 to 5.2.13\"}]}, {\"vendor\": \"Six Apart Ltd.\", \"product\": \"Movable Type\", \"versions\": [{\"status\": \"affected\", \"version\": \"6.0\"}, {\"status\": \"affected\", \"version\": \"6.0.1 to 6.8.8\"}]}, {\"vendor\": \"Six Apart Ltd.\", \"product\": \"Movable Type\", \"versions\": [{\"status\": \"affected\", \"version\": \"7 r.4207 to r.5510\"}]}, {\"vendor\": \"Six Apart Ltd.\", \"product\": \"Movable Type\", \"versions\": [{\"status\": \"affected\", \"version\": \"8.4.0 to 8.4.4\"}]}, {\"vendor\": \"Six Apart Ltd.\", \"product\": \"Movable Type\", \"versions\": [{\"status\": \"affected\", \"version\": \"1.0 to 1.68\"}]}], \"references\": [{\"url\": \"https://movabletype.org/news/2026/04/mt-907-released.html\"}, {\"url\": \"https://www.sixapart.jp/movabletype/news/2026/04/08-1100.html\"}, {\"url\": \"https://jvn.jp/en/jp/JVN66473735/\"}], \"descriptions\": [{\"lang\": \"en\", \"value\": \"Movable Type provided by Six Apart Ltd. contains an SQL Injection vulnerability which may allow an attacker to execute an arbitrary SQL statement.\"}], \"problemTypes\": [{\"descriptions\": [{\"lang\": \"en-US\", \"type\": \"CWE\", \"cweId\": \"CWE-89\", \"description\": \"Improper neutralization of special elements used in an SQL command (\u0027SQL Injection\u0027)\"}]}], \"providerMetadata\": {\"orgId\": \"ede6fdc4-6654-4307-a26d-3331c018e2ce\", \"shortName\": \"jpcert\", \"dateUpdated\": \"2026-04-08T08:51:45.916Z\"}}}",
      "cveMetadata": "{\"cveId\": \"CVE-2026-33088\", \"state\": \"PUBLISHED\", \"dateUpdated\": \"2026-04-08T13:31:08.213Z\", \"dateReserved\": \"2026-03-26T01:06:13.982Z\", \"assignerOrgId\": \"ede6fdc4-6654-4307-a26d-3331c018e2ce\", \"datePublished\": \"2026-04-08T08:51:45.916Z\", \"assignerShortName\": \"jpcert\"}",
      "dataType": "CVE_RECORD",
      "dataVersion": "5.2"
    }
  }
}

FKIE_CVE-2026-33088

Vulnerability from fkie_nvd - Published: 2026-04-08 09:16 - Updated: 2026-04-08 21:26

Severity ?

7.3 (High) - CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L

Summary

Movable Type provided by Six Apart Ltd. contains an SQL Injection vulnerability which may allow an attacker to execute an arbitrary SQL statement.

References

	URL	Tags
	vultures@jpcert.or.jp	https://jvn.jp/en/jp/JVN66473735/
	vultures@jpcert.or.jp	https://movabletype.org/news/2026/04/mt-907-released.html
	vultures@jpcert.or.jp	https://www.sixapart.jp/movabletype/news/2026/04/08-1100.html

Impacted products

	Vendor	Product	Version

JSON

To clipboard

{
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "Movable Type provided by Six Apart Ltd. contains an SQL Injection vulnerability which may allow an attacker to execute an arbitrary SQL statement."
    }
  ],
  "id": "CVE-2026-33088",
  "lastModified": "2026-04-08T21:26:35.910",
  "metrics": {
    "cvssMetricV30": [
      {
        "cvssData": {
          "attackComplexity": "LOW",
          "attackVector": "NETWORK",
          "availabilityImpact": "LOW",
          "baseScore": 7.3,
          "baseSeverity": "HIGH",
          "confidentialityImpact": "LOW",
          "integrityImpact": "LOW",
          "privilegesRequired": "NONE",
          "scope": "UNCHANGED",
          "userInteraction": "NONE",
          "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L",
          "version": "3.0"
        },
        "exploitabilityScore": 3.9,
        "impactScore": 3.4,
        "source": "vultures@jpcert.or.jp",
        "type": "Secondary"
      }
    ],
    "cvssMetricV40": [
      {
        "cvssData": {
          "Automatable": "NOT_DEFINED",
          "Recovery": "NOT_DEFINED",
          "Safety": "NOT_DEFINED",
          "attackComplexity": "LOW",
          "attackRequirements": "NONE",
          "attackVector": "NETWORK",
          "availabilityRequirement": "NOT_DEFINED",
          "baseScore": 6.9,
          "baseSeverity": "MEDIUM",
          "confidentialityRequirement": "NOT_DEFINED",
          "exploitMaturity": "NOT_DEFINED",
          "integrityRequirement": "NOT_DEFINED",
          "modifiedAttackComplexity": "NOT_DEFINED",
          "modifiedAttackRequirements": "NOT_DEFINED",
          "modifiedAttackVector": "NOT_DEFINED",
          "modifiedPrivilegesRequired": "NOT_DEFINED",
          "modifiedSubAvailabilityImpact": "NOT_DEFINED",
          "modifiedSubConfidentialityImpact": "NOT_DEFINED",
          "modifiedSubIntegrityImpact": "NOT_DEFINED",
          "modifiedUserInteraction": "NOT_DEFINED",
          "modifiedVulnAvailabilityImpact": "NOT_DEFINED",
          "modifiedVulnConfidentialityImpact": "NOT_DEFINED",
          "modifiedVulnIntegrityImpact": "NOT_DEFINED",
          "privilegesRequired": "NONE",
          "providerUrgency": "NOT_DEFINED",
          "subAvailabilityImpact": "NONE",
          "subConfidentialityImpact": "NONE",
          "subIntegrityImpact": "NONE",
          "userInteraction": "NONE",
          "valueDensity": "NOT_DEFINED",
          "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
          "version": "4.0",
          "vulnAvailabilityImpact": "LOW",
          "vulnConfidentialityImpact": "LOW",
          "vulnIntegrityImpact": "LOW",
          "vulnerabilityResponseEffort": "NOT_DEFINED"
        },
        "source": "vultures@jpcert.or.jp",
        "type": "Secondary"
      }
    ]
  },
  "published": "2026-04-08T09:16:21.213",
  "references": [
    {
      "source": "vultures@jpcert.or.jp",
      "url": "https://jvn.jp/en/jp/JVN66473735/"
    },
    {
      "source": "vultures@jpcert.or.jp",
      "url": "https://movabletype.org/news/2026/04/mt-907-released.html"
    },
    {
      "source": "vultures@jpcert.or.jp",
      "url": "https://www.sixapart.jp/movabletype/news/2026/04/08-1100.html"
    }
  ],
  "sourceIdentifier": "vultures@jpcert.or.jp",
  "vulnStatus": "Awaiting Analysis",
  "weaknesses": [
    {
      "description": [
        {
          "lang": "en",
          "value": "CWE-89"
        }
      ],
      "source": "vultures@jpcert.or.jp",
      "type": "Primary"
    }
  ]
}

GHSA-PQ32-JH3R-7R93

Vulnerability from github – Published: 2026-04-08 09:31 – Updated: 2026-04-08 09:31

Details

Movable Type provided by Six Apart Ltd. contains an SQL Injection vulnerability which may allow an attacker to execute an arbitrary SQL statement.

Severity ?

7.3 (High)


                  
                    CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L

6.9 (Medium)


                  
                    CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N

Show details on source website

JSON

To clipboard

{
  "affected": [],
  "aliases": [
    "CVE-2026-33088"
  ],
  "database_specific": {
    "cwe_ids": [
      "CWE-89"
    ],
    "github_reviewed": false,
    "github_reviewed_at": null,
    "nvd_published_at": "2026-04-08T09:16:21Z",
    "severity": "MODERATE"
  },
  "details": "Movable Type provided by Six Apart Ltd. contains an SQL Injection vulnerability which may allow an attacker to execute an arbitrary SQL statement.",
  "id": "GHSA-pq32-jh3r-7r93",
  "modified": "2026-04-08T09:31:31Z",
  "published": "2026-04-08T09:31:31Z",
  "references": [
    {
      "type": "ADVISORY",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-33088"
    },
    {
      "type": "WEB",
      "url": "https://jvn.jp/en/jp/JVN66473735"
    },
    {
      "type": "WEB",
      "url": "https://movabletype.org/news/2026/04/mt-907-released.html"
    },
    {
      "type": "WEB",
      "url": "https://www.sixapart.jp/movabletype/news/2026/04/08-1100.html"
    }
  ],
  "schema_version": "1.4.0",
  "severity": [
    {
      "score": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L",
      "type": "CVSS_V3"
    },
    {
      "score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
      "type": "CVSS_V4"
    }
  ]
}

JVNDB-2026-000050

Vulnerability from jvndb - Published: 2026-04-08 16:15 - Updated:2026-04-08 16:15

Severity ?

9.8 (Critical) - cvssV3_0 - CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Summary

Multiple vulnerabilities in Movable Type

Details

The Listing Framework of Movable Type provided by Six Apart Ltd. contains multiple vulnerabilities listed below.

Code injection (CWE-94) - CVE-2026-25776
SQL injection (CWE-89) - CVE-2026-33088

CVE-2026-25776 Sho Odagiri of GMO Cybersecurity by Ierae, Inc. reported this vulnerability to Six Apart Ltd. and coordinated. After the coordination was completed, Six Apart Ltd. reported the case to JPCERT/CC to notify users of the solution through JVN. CVE-2026-33088 Six Apart Ltd. reported this vulnerability to JPCERT/CC to notify users of its solution through JVN. JPCERT/CC and Six Apart Ltd. coordinated under the Information Security Early Warning Partnership.

References

Type

URL

	JVN	https://jvn.jp/en/jp/JVN66473735/index.html
	CVE	https://www.cve.org/CVERecord?id=CVE-2026-25776
	CVE	https://www.cve.org/CVERecord?id=CVE-2026-33088
	SQL Injection(CWE-89)	https://www.ipa.go.jp/en/security/vulnerabilities/cwe.html
	Code Injection(CWE-94)	https://www.ipa.go.jp/en/security/vulnerabilities/cwe.html

Impacted products

Vendor

Product

	Six Apart, Ltd.	Movable Type
	Six Apart, Ltd.	Movable Type Advanced
	Six Apart, Ltd.	Movable Type Premium
	Six Apart, Ltd.	Movable Type Premium (Advanced Edition)
	Six Apart, Ltd.	Movable Type Premium MT8-based

Show details on JVN DB website

JSON

To clipboard

{
  "@rdf:about": "https://jvndb.jvn.jp/en/contents/2026/JVNDB-2026-000050.html",
  "dc:date": "2026-04-08T16:15+09:00",
  "dcterms:issued": "2026-04-08T16:15+09:00",
  "dcterms:modified": "2026-04-08T16:15+09:00",
  "description": "The Listing Framework of Movable Type provided by Six Apart Ltd. contains multiple vulnerabilities listed below.\u003ca href=\u0027https://cwe.mitre.org/data/definitions/94.html\u0027 target=\u0027_blank\u0027\u003e\u003c/a\u003e\u003ca href=\u0027https://cwe.mitre.org/data/definitions/89.html\u0027 target=\u0027_blank\u0027\u003e\u003c/a\u003e\u003cul\u003e\u003cli\u003eCode injection (CWE-94) - CVE-2026-25776\u003c/li\u003e\u003cli\u003eSQL injection (CWE-89) - CVE-2026-33088\u003c/li\u003e\u003c/ul\u003eCVE-2026-25776\r\nSho Odagiri of GMO Cybersecurity by Ierae, Inc. reported this vulnerability to Six Apart Ltd. and coordinated. After the coordination was completed, Six Apart Ltd. reported the case to JPCERT/CC to notify users of the solution through JVN.\r\n\r\nCVE-2026-33088\r\nSix Apart Ltd. reported this vulnerability to JPCERT/CC to notify users of its solution through JVN. JPCERT/CC and Six Apart Ltd. coordinated under the Information Security Early Warning Partnership.",
  "link": "https://jvndb.jvn.jp/en/contents/2026/JVNDB-2026-000050.html",
  "sec:cpe": [
    {
      "#text": "cpe:/a:sixapart:movable_type",
      "@product": "Movable Type",
      "@vendor": "Six Apart, Ltd.",
      "@version": "2.2"
    },
    {
      "#text": "cpe:/a:sixapart:movable_type_advanced",
      "@product": "Movable Type Advanced",
      "@vendor": "Six Apart, Ltd.",
      "@version": "2.2"
    },
    {
      "#text": "cpe:/a:sixapart:movable_type_premium",
      "@product": "Movable Type Premium",
      "@vendor": "Six Apart, Ltd.",
      "@version": "2.2"
    },
    {
      "#text": "cpe:/a:sixapart:movable_type_premium_advanced",
      "@product": "Movable Type Premium (Advanced Edition)",
      "@vendor": "Six Apart, Ltd.",
      "@version": "2.2"
    },
    {
      "#text": "cpe:/a:sixapart:movable_type_premium_mt8base",
      "@product": "Movable Type Premium MT8-based",
      "@vendor": "Six Apart, Ltd.",
      "@version": "2.2"
    }
  ],
  "sec:cvss": {
    "@score": "9.8",
    "@severity": "Critical",
    "@type": "Base",
    "@vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
    "@version": "3.0"
  },
  "sec:identifier": "JVNDB-2026-000050",
  "sec:references": [
    {
      "#text": "https://jvn.jp/en/jp/JVN66473735/index.html",
      "@id": "JVN#66473735",
      "@source": "JVN"
    },
    {
      "#text": "https://www.cve.org/CVERecord?id=CVE-2026-25776",
      "@id": "CVE-2026-25776",
      "@source": "CVE"
    },
    {
      "#text": "https://www.cve.org/CVERecord?id=CVE-2026-33088",
      "@id": "CVE-2026-33088",
      "@source": "CVE"
    },
    {
      "#text": "https://www.ipa.go.jp/en/security/vulnerabilities/cwe.html",
      "@id": "CWE-89",
      "@title": "SQL Injection(CWE-89)"
    },
    {
      "#text": "https://www.ipa.go.jp/en/security/vulnerabilities/cwe.html",
      "@id": "CWE-94",
      "@title": "Code Injection(CWE-94)"
    }
  ],
  "title": "Multiple vulnerabilities in Movable Type"
}

Sightings

Author	Source	Type	Date

Nomenclature

Seen: The vulnerability was mentioned, discussed, or observed by the user.
Confirmed: The vulnerability has been validated from an analyst's perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
Not confirmed: The user expressed doubt about the validity of the vulnerability.
Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

Detection rules are retrieved from Rulezet.

Action not permitted

CVE-2026-33088 (GCVE-0-2026-33088)

FKIE_CVE-2026-33088

GHSA-PQ32-JH3R-7R93

JVNDB-2026-000050

Tags

Sightings

Nomenclature