CVE-2026-33088

—

CVSS 4.0

6.9 medium

EPSS

<1%p28

Published

Apr 8, 2026 (Apr 8, 2026)

Modified

Jul 24, 2026

Description

Movable Type provided by Six Apart Ltd. contains an SQL Injection vulnerability which may allow an attacker to execute an arbitrary SQL statement.

Vendors: sixapart
Products: movable type
Weakness: CWE-89
Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

In the news0 stories

No ingested article mentions this CVE yet.