Known vulnerabilities in Movable Type Premium (MT8-based)

Vendor: Six Apart Ltd
Software: Movable Type Premium (MT8-based)
Software CPE: cpe:2.3:a:six_apart:movable_type_premium_mt8-based:*:*:*:*:*:*:*:*
Website: https://movabletype.com
Total vulnerabilities: 2
Public exploits: 0
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Movable Type Premium (MT8-based) Movable Type Premium (MT8-based) is affected by 2 known vulnerabilities: 2 high Critical High Medium Low

Vulnerabilities (2)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU125193 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2026-33088		 CWE-89 High
No
No
 2.15, 9.0.7, 9.1.1 08.04.2026 SB2026040846
#VU125192 - Improper Control of Generation of Code ('Code Injection')
CVE-2026-25776		 CWE-94 High
No
No
 2.15, 9.0.7, 9.1.1 08.04.2026 SB2026040846