JVNDB-2026-000146 Multiple vulnerabilities in Movable Type

Classification: Critical, Solution: Official Fix, Exploit Maturity: Not Defined, CVSSv4.0: 9.3, CVEs: CVE-2026-96408, CVE-2026-103668, Summary: Movable Type provided by Six Apart Ltd. contains multiple vulnerabilities listed below: Code Injection in the Upgrade Script (CWE-94) - CVE-2026-96408 SQL Injection in the Site Search function (CWE-89) - CVE-2026-103668 In addition, multiple vulnerabilities have been addressed. For details, refer to the information provided by the developer.

Číst originál na NCSC-FI →

CZ · EN/orig

Six Apart Ltd. FI

tg: zranitelnost

CVE v události 2

CVE	hodnocení	KEV	EPSS
CVE-2026-103668	8.8 4.0 · jpcert 8.6 3.0 · jpcert	–	< 0.01
CVE-2026-96408	9.4 3.0 · jpcert 9.3 4.0 · jpcert	–	< 0.01

Hodnocení z katalogů, všechna, se stupnicí CVSS a vydavatelem. Rozpad vektoru je na stránce CVE. Advisory v textu uvádí CVSS 9.3.