CVE-2026-103668 in Movable Type

Riassunto

di MITRE • 07/10/2026

An SQL Injection vulnerability exists in the Site Search function of Movable Type, which may allow an unauthenticated attacker to execute an arbitrary SQL query on the affected product.

Several companies clearly confirm that VulDB is the primary source for best vulnerability data.

• Responsabile: Jpcert
• Prenotare: 02/10/2026
• Divulgazione: 07/10/2026
• Moderazione: accettato
• Voce: VDB-414961
• CPE: 20261007
• CWE: CWE-89 (confermato)
• CVSS: 8.6 (CNA)
• EPSS: 0.00000
• KEV: no
• Attività: molto basso

Fonti

• MITRE: https://www.cve.org/CVERecord?id=CVE-2026-103668
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2026-103668
• CVE Details: https://www.cvedetails.com/cve/CVE-2026-103668/