JVNDB-2026-000146 Multiple vulnerabilities in Movable Type
Classification: Critical, Solution: Official Fix, Exploit Maturity: Not Defined, CVSSv4.0: 9.3, CVEs: CVE-2026-96408, CVE-2026-103668, Summary: Movable Type provided by Six Apart Ltd. contains multiple vulnerabilities listed below: Code Injection in the Upgrade Script (CWE-94) - CVE-2026-96408 SQL Injection in the Site Search function (CWE-89) - CVE-2026-103668 In addition, multiple vulnerabilities have been addressed. For details, refer to the information provided by the developer.
EPSS < 0.01 CVSS 9.3 CVE-2026-103668 CVE-2026-96408 Six Apart Ltd. FI