Movable Type Premium vulnerabilities

2 known vulnerabilities in Movable Type Premium from Six Apart. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 9.3 Critical severity

  Movable Type Cloud Edition: Improper Control of Generation of Code

  CVE-2026-96408Oct 7, 2026Six Apart

  A code injection vulnerability exists in the upgrade script of Movable Type, which may allow an unauthenticated attacker to execute an arbitrary Perl script or an SQL query on the affected product.

• 8.8 High severity

  Movable Type Cloud Edition: Improper Neutralization of Special Elements used in an SQL Command

  CVE-2026-103668Oct 7, 2026Six Apart

  An SQL Injection vulnerability exists in the Site Search function of Movable Type, which may allow an unauthenticated attacker to execute an arbitrary SQL query on the affected product.