Findings

CVE-2026-44392

Missing authorization vulnerability exists in Movable Type.

Published May 20, 2026 · updated Jul 24, 2026

Missing authorization vulnerability exists in Movable Type. Under certain conditions, when a user without administrator privileges signs in to the product, unintended update processing may be executed.

Code

The project this record applies to. Exploit listings stay in References.

No public source repository is identified for this product.

Timeline

Detection, updates, and resolution for this record.

  1. May 20, 2026 · NIST NVD

    Detected

    Missing authorization vulnerability exists in Movable Type. Under certain conditions, when a user without administrator privileges signs in to the product, unintended update processing may be executed.

  2. Jul 24, 2026 · NIST NVD

    Updated

    Missing authorization vulnerability exists in Movable Type. Under certain conditions, when a user without administrator privileges signs in to the product, unintended update processing may be executed.

Sources

  • CVE.orgVulnerability recordCVE-2026-44392

    Official CVE identifier

    cve.org
  • NIST NVDVulnerability recordCVE-2026-44392

    Missing authorization vulnerability exists in Movable Type. Under certain conditions, when a user without administrator privileges signs in to the product, unintended update processing may be executed.

    nvd.nist.gov

References

CVE-2026-44392 · ZeroDay Findings