CVE-2026-96408
CVE.org · Published
- Record status
- Published
- Identifier year (not publication year)
- 2026
- Source publication
- Source updated
- Imported by cveboard
- Source snapshot
- cve_2026-10-24_midnight_baseline ·
CNA source text (English)
A code injection vulnerability exists in the upgrade script of Movable Type, which may allow an unauthenticated attacker to execute an arbitrary Perl script or an SQL query on the affected product.
Scoped product and version facts
Fix information unknown; no fixed version is derived here. Missing information does not prove that no fix exists.
Exploitation unknown; this catalogue does not assess exploitation.
Movable Type Cloud Edition
- Vendor
- Six Apart Ltd.
- Product
- Movable Type Cloud Edition
- Platforms
- Unknown
- Default status
unaffected
| Version (version) | Status (status) | Version scheme (versionType) | Exclusive end (lessThan) | Inclusive end (lessThanOrEqual) | Status changes (at → status) |
|---|---|---|---|---|---|
| 9.2.0 | affected | semver | Unavailable | 9.2.1 | None listed |
Movable Type
- Vendor
- Six Apart Ltd.
- Product
- Movable Type
- Platforms
- Unknown
- Default status
unaffected
| Version (version) | Status (status) | Version scheme (versionType) | Exclusive end (lessThan) | Inclusive end (lessThanOrEqual) | Status changes (at → status) |
|---|---|---|---|---|---|
| 9.0.0 | affected | semver | Unavailable | 9.0.9 | None listed |
| 8.8.0 | affected | semver | Unavailable | 8.8.5 | None listed |
| 8.0.0 | affected | semver | Unavailable | 8.0.12 | None listed |
Movable Type Premium Cloud Edition
- Vendor
- Six Apart Ltd.
- Product
- Movable Type Premium Cloud Edition
- Platforms
- Unknown
- Default status
unaffected
| Version (version) | Status (status) | Version scheme (versionType) | Exclusive end (lessThan) | Inclusive end (lessThanOrEqual) | Status changes (at → status) |
|---|---|---|---|---|---|
| 9.2.0 | affected | semver | Unavailable | 9.2.1 | None listed |
Movable Type Premium
- Vendor
- Six Apart Ltd.
- Product
- Movable Type Premium
- Platforms
- Unknown
- Default status
unaffected
| Version (version) | Status (status) | Version scheme (versionType) | Exclusive end (lessThan) | Inclusive end (lessThanOrEqual) | Status changes (at → status) |
|---|---|---|---|---|---|
| 9.0.0 | affected | semver | Unavailable | 9.0.9 | None listed |
| 2.0 | affected | semver | Unavailable | 2.17 | None listed |