critical9.8
CVE-2026-25776
Movable Type provided by Six Apart Ltd.
Impact
Movable Type provided by Six Apart Ltd. contains a code injection vulnerability which may allow an attacker to execute arbitrary Perl script.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Sixapart | Movable Type | through 2.14 from 8.0.2 before 8.0.10 from 8.8.0 before 8.8.3 Versions 9.0.5, 9.0.6, 9.1.0 |