Movable Type Code Injection & SQL Injection Vulnerabilities (CVE-2026-96408, CVE-2026-103668)
Security Advisory
JVN#91153973
Critical
Six Apart Ltd.
Affected:
- Movable Type 9.2.1 and earlier
- Movable Type 9.0.9 and earlier
- Movable Type 8.8.5 and earlier
- Movable Type 8.0.12 and earlier
- Movable Type Premium 9.2.1 and earlier
Fixed in:
- 9.3.0
- 9.0.10
- 8.8.6
- 8.0.13
- 2.18
文章内图片已隐藏以节省流量 · 升级 Pro 后可见图片及离线存档