Six Apart Ltd. Movable Type Advanced vulnerabilities
🔔 Create alert RSS Version checker
Published CVEs affecting Six Apart Ltd. Movable Type Advanced: 3 record(s), with affected versions and fixes.
CVE-2026-44392
Medium · 4.3
CWE-862 May 20, 2026
Missing Authorization in Six Apart Ltd. Movable Type
Missing authorization vulnerability exists in Movable Type. Under certain conditions, when a user without administrator privileges signs in to the product, unintended update processing may be executed.
CVE-2026-33088
Critical · 9.8
CWE-89 Apr 8, 2026
SQL Injection in Six Apart Ltd. Movable Type
Movable Type provided by Six Apart Ltd. contains an SQL Injection vulnerability which may allow an attacker to execute an arbitrary SQL statement.
CVE-2026-25776
Critical · 9.8
CWE-94 Apr 8, 2026
Code Injection in Six Apart Ltd. Movable Type
Movable Type provided by Six Apart Ltd. contains a code injection vulnerability which may allow an attacker to execute arbitrary Perl script.