CVE-2026-25776

概要

参考情報

• jvn.jp/en/jp/JVN66473735 · Third Party Advisory
• movabletype.org/news/2026/04/mt-907-released.html · Vendor Advisory
• sixapart.jp/movabletype/news/2026/04/08-1100.html · Vendor Advisory

movable type のその他の脆弱性

• CVE-2026-33088緊急 9.8Movable Type provided by Six Apart Ltd. contains an SQL Injection vulnerability which may allow an attacker to execute an arbitrary SQL stat…
• CVE-2023-45746中 5.4Cross-site scripting vulnerability in Movable Type series allows a remote authenticated attacker to inject an arbitrary script. Affected pro…
• CVE-2022-45122中 6.1Cross-site scripting vulnerability in Movable Type Movable Type 7 r.5301 and earlier (Movable Type 7 Series), Movable Type Advanced 7 r.5301…
• CVE-2022-45113中 6.5Improper validation of syntactic correctness of input vulnerability exist in Movable Type series. Having a user to access a specially crafte…
• CVE-2022-43660高 7.2Improper neutralization of Server-Side Includes (SSW) within a web page in Movable Type series allows a remote authenticated attacker with P…