HarborGuard / CVE
Back to search
CRITICALCVE-2026-25776Published Modified CNA jpcert

CVE-2026-25776: Movable Type provided by Six Apart Ltd

Movable Type provided by Six Apart Ltd. contains a code injection vulnerability which may allow an attacker to execute arbitrary Perl script.

Metrics

CVSS v4.0
9.3
Severity
CRITICAL
Fixed in
—
Affected Products
21
Affected packages
  • Six Apart Ltd. / Movable Type
    9.1.0 and earlier
  • Six Apart Ltd. / Movable Type
    9.0.6 and earlier
  • Six Apart Ltd. / Movable Type
    8.8.2 and earlier
  • Six Apart Ltd. / Movable Type
    8.0.9 and earlier
  • Six Apart Ltd. / Movable Type Advanced
    9.1.0 and earlier
  • Six Apart Ltd. / Movable Type Advanced
    9.0.6 and earlier
  • Six Apart Ltd. / Movable Type Advanced
    8.8.2 and earlier
  • Six Apart Ltd. / Movable Type Advanced
    8.0.9 and earlier
  • Six Apart Ltd. / Movable Type Premium
    9.1.0 and earlier
  • Six Apart Ltd. / Movable Type Premium
    9.0.6 and earlier
  • Six Apart Ltd. / Movable Type Premium Advanced Edition
    9.1.0 and earlier
  • Six Apart Ltd. / Movable Type Premium Advanced Edition
    9.0.6 and earlier
  • Six Apart Ltd. / Movable Type Premium
    2.14 and earlier
  • Six Apart Ltd. / Movable Type Premium Advanced Edition
    2.14 and earlier
  • Six Apart Ltd. / Movable Type Premium (MT8-based)
    2.14 and earlier
  • Six Apart Ltd. / Movable Type
    5.1 to 5.18
  • Six Apart Ltd. / Movable Type
    5.2 · 5.2.1 to 5.2.13
  • Six Apart Ltd. / Movable Type
    6.0 · 6.0.1 to 6.8.8
  • Six Apart Ltd. / Movable Type
    7 r.4207 to r.5510
  • Six Apart Ltd. / Movable Type
    8.4.0 to 8.4.4
  • Six Apart Ltd. / Movable Type
    1.0 to 1.68
CVSS Vector
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
References