HIGH 8.8 NVD
CVE-2026-103668
An SQL Injection vulnerability exists in the Site Search function of Movable Type, which may allow an unauthenticated attacker to execute an arbitrary SQL query
An SQL Injection vulnerability exists in the Site Search function of Movable Type, which may allow an unauthenticated attacker to execute an arbitrary SQL query on the affected product.
References
- https://jvn.jp/en/jp/JVN91153973/
- https://movabletype.org/news/2026/10/mt-930-released.html
- https://www.sixapart.jp/movabletype/news/2026/10/07-1100.html
This high severity vulnerability with a CVSS score of 8.8 was published on 2026-10-07 via NVD.
vulnfeed aggregates 13827 vulnerabilities from NVD, CISA KEV,
Ubuntu, Debian, Red Hat, Kubernetes, Exploit-DB, OSS-Security, GitHub and OpenStack — updated every 4 hours.