CVE-2026-44392
Missing authorization vulnerability exists in Movable Type.
Published May 20, 2026 · updated Jul 24, 2026
Missing authorization vulnerability exists in Movable Type. Under certain conditions, when a user without administrator privileges signs in to the product, unintended update processing may be executed.
Code
The project this record applies to. Exploit listings stay in References.
No public source repository is identified for this product.
Timeline
Detection, updates, and resolution for this record.
May 20, 2026 · NIST NVD
Detected
Missing authorization vulnerability exists in Movable Type. Under certain conditions, when a user without administrator privileges signs in to the product, unintended update processing may be executed.
Jul 24, 2026 · NIST NVD
Updated
Missing authorization vulnerability exists in Movable Type. Under certain conditions, when a user without administrator privileges signs in to the product, unintended update processing may be executed.
Sources
- CVE.orgVulnerability recordCVE-2026-44392
Official CVE identifier
cve.org - NIST NVDVulnerability recordCVE-2026-44392
Missing authorization vulnerability exists in Movable Type. Under certain conditions, when a user without administrator privileges signs in to the product, unintended update processing may be executed.
nvd.nist.gov