CVE-2026-25776

Description

Movable Type provided by Six Apart Ltd. contains a code injection vulnerability which may allow an attacker to execute arbitrary Perl script.

CVSS Vector

References

• https://jvn.jp/en/jp/JVN66473735/
• https://movabletype.org/news/2026/04/mt-907-released.html
• https://www.sixapart.jp/movabletype/news/2026/04/08-1100.html