CVE-2026-96408
CRITICAL9.4CVSS v3
—CVSS v2
0.64%
EPSS (exploit probability)
CWE-94CWE
Description
A code injection vulnerability exists in the upgrade script of Movable Type, which may allow an unauthenticated attacker to execute an arbitrary Perl script or an SQL query on the affected product.
CVSS v3 vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:L
Affected routers (0)
No routers currently mapped to this CVE in our database.