Movable Type provided by Six Apart Ltd.

Code

The project this record applies to. Exploit listings stay in References.

No public source repository is identified for this product.

Timeline

Detection, updates, and resolution for this record.

1. Apr 8, 2026 · NIST NVD

   Detected

   Movable Type provided by Six Apart Ltd. contains a code injection vulnerability which may allow an attacker to execute arbitrary Perl script.

2. Jul 25, 2026 · NIST NVD

   Updated

   Movable Type provided by Six Apart Ltd. contains a code injection vulnerability which may allow an attacker to execute arbitrary Perl script.

Affected

• cpe sixapart/movable typeversion unspecified
• cpe sixapart/movable type9.0.5
• cpe sixapart/movable type9.0.6
• cpe sixapart/movable type9.1.0

Sources

• CVE.orgVulnerability recordCVE-2026-25776

  Official CVE identifier

  cve.org
• NIST NVDVulnerability recordCVE-2026-25776

  Movable Type provided by Six Apart Ltd. contains a code injection vulnerability which may allow an attacker to execute arbitrary Perl script.

  nvd.nist.gov

References

• Third Party Advisory · jvn.jp
• Vendor Advisory · movabletype.org
• Vendor Advisory · sixapart.jp