Six Apart Ltd Movable Type Advanced

• CVE-2026-44392 Medium 4.3 Missing authorization vulnerability exists in Movable Type. Under certain conditions, when a user without administrator privileges signs in to the product, unintended update processing may be executed 0.2%
• CVE-2026-25776 Critical 9.8 Movable Type provided by Six Apart Ltd. contains a code injection vulnerability which may allow an attacker to execute arbitrary Perl script. 0.7%
• CVE-2026-33088 High 7.3 Movable Type provided by Six Apart Ltd. contains an SQL Injection vulnerability which may allow an attacker to execute an arbitrary SQL statement. 0.4%