Movable Type provided by Six Apart Ltd.

Code

The project this record applies to. Exploit listings stay in References.

No public source repository is identified for this product.

Timeline

Detection, updates, and resolution for this record.

1. Apr 8, 2026 · NIST NVD

   Detected

   Movable Type provided by Six Apart Ltd. contains an SQL Injection vulnerability which may allow an attacker to execute an arbitrary SQL statement.

2. Jul 24, 2026 · NIST NVD

   Updated

   Movable Type provided by Six Apart Ltd. contains an SQL Injection vulnerability which may allow an attacker to execute an arbitrary SQL statement.

Affected

• cpe sixapart/movable typeversion unspecified
• cpe sixapart/movable type9.0.5
• cpe sixapart/movable type9.0.6
• cpe sixapart/movable type9.1.0

Sources

• CVE.orgVulnerability recordCVE-2026-33088

  Official CVE identifier

  cve.org
• NIST NVDVulnerability recordCVE-2026-33088

  Movable Type provided by Six Apart Ltd. contains an SQL Injection vulnerability which may allow an attacker to execute an arbitrary SQL statement.

  nvd.nist.gov

References

• Third Party Advisory · jvn.jp
• Vendor Advisory · movabletype.org
• Vendor Advisory · sixapart.jp