CVE-2026-96408Published

A code injection vulnerability exists in the upgrade script of Movable Type, which may allow an unauthenticated attacker to execute an arbitrary Perl script or an SQL query on the affected product.

Exact source revision recorded 23 Oct 2026 15:48:27 UTC. It does not establish the source's current position. Latest evidence.

Recorded JSON

cve-program · CVE-2026-96408

Published

Movable Type Cloud Edition

Vendor product

Original vendor version evidence · not evaluated as a NuGet range

{
                    "vendor": "Six Apart Ltd.",
                    "product": "Movable Type Cloud Edition",
                    "defaultStatus": "unaffected",
                    "versions": [
                        {
                            "version": "9.2.0",
                            "status": "affected",
                            "versionType": "semver",
                            "lessThanOrEqual": "9.2.1"
                        }
                    ]
                }

Movable Type

Vendor product

Original vendor version evidence · not evaluated as a NuGet range

{
                    "vendor": "Six Apart Ltd.",
                    "product": "Movable Type",
                    "defaultStatus": "unaffected",
                    "versions": [
                        {
                            "version": "9.0.0",
                            "status": "affected",
                            "versionType": "semver",
                            "lessThanOrEqual": "9.0.9"
                        },
                        {
                            "version": "8.8.0",
                            "status": "affected",
                            "versionType": "semver",
                            "lessThanOrEqual": "8.8.5"
                        },
                        {
                            "version": "8.0.0",
                            "status": "affected",
                            "versionType": "semver",
                            "lessThanOrEqual": "8.0.12"
                        }
                    ]
                }

Movable Type Premium Cloud Edition

Vendor product

Original vendor version evidence · not evaluated as a NuGet range

{
                    "vendor": "Six Apart Ltd.",
                    "product": "Movable Type Premium Cloud Edition",
                    "defaultStatus": "unaffected",
                    "versions": [
                        {
                            "version": "9.2.0",
                            "status": "affected",
                            "versionType": "semver",
                            "lessThanOrEqual": "9.2.1"
                        }
                    ]
                }

Movable Type Premium

Vendor product

Original vendor version evidence · not evaluated as a NuGet range

{
                    "vendor": "Six Apart Ltd.",
                    "product": "Movable Type Premium",
                    "defaultStatus": "unaffected",
                    "versions": [
                        {
                            "version": "9.0.0",
                            "status": "affected",
                            "versionType": "semver",
                            "lessThanOrEqual": "9.0.9"
                        },
                        {
                            "version": "2.0",
                            "status": "affected",
                            "versionType": "semver",
                            "lessThanOrEqual": "2.17"
                        }
                    ]
                }

Original source record · Cite this exact observation · Complete original publisher JSON