Skip to content
CVE PROGRAM SOURCE RECORD9.3 Critical

CVE-2026-25776

Movable Type provided by Six Apart Ltd. contains a code injection vulnerability which may allow an attacker to execute arbitrary Perl script.

Description

Movable Type provided by Six Apart Ltd. contains a code injection vulnerability which may allow an attacker to execute arbitrary Perl script.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Six Apart Ltd. Movable Type

  • 9.1.0 and earlieraffected

Six Apart Ltd. Movable Type

  • 9.0.6 and earlieraffected

Six Apart Ltd. Movable Type

  • 8.8.2 and earlieraffected

Six Apart Ltd. Movable Type

  • 8.0.9 and earlieraffected

Six Apart Ltd. Movable Type Advanced

  • 9.1.0 and earlieraffected

Six Apart Ltd. Movable Type Advanced

  • 9.0.6 and earlieraffected

Six Apart Ltd. Movable Type Advanced

  • 8.8.2 and earlieraffected

Six Apart Ltd. Movable Type Advanced

  • 8.0.9 and earlieraffected

Six Apart Ltd. Movable Type Premium

  • 9.1.0 and earlieraffected

Six Apart Ltd. Movable Type Premium

  • 9.0.6 and earlieraffected

Six Apart Ltd. Movable Type Premium Advanced Edition

  • 9.1.0 and earlieraffected

Six Apart Ltd. Movable Type Premium Advanced Edition

  • 9.0.6 and earlieraffected

Six Apart Ltd. Movable Type Premium

  • 2.14 and earlieraffected

Six Apart Ltd. Movable Type Premium Advanced Edition

  • 2.14 and earlieraffected

Six Apart Ltd. Movable Type Premium (MT8-based)

  • 2.14 and earlieraffected

Six Apart Ltd. Movable Type

  • 5.1 to 5.18affected

Six Apart Ltd. Movable Type

  • 5.2affected
  • 5.2.1 to 5.2.13affected

Six Apart Ltd. Movable Type

  • 6.0affected
  • 6.0.1 to 6.8.8affected

Six Apart Ltd. Movable Type

  • 7 r.4207 to r.5510affected

Six Apart Ltd. Movable Type

  • 8.4.0 to 8.4.4affected

Six Apart Ltd. Movable Type

  • 1.0 to 1.68affected

References