CVE-2026-117687
CVSS Score
7.3
EPSS Score
0.0%
EPSS Percentile
0th
Movable Type provided by Six Apart Ltd. contains a code injection vulnerability in its Dynamic Publishing functionality. By sending a specially crafted request that is processed by the Dynamic Publishing, an attacker may be able to execute arbitrary PHP code on the affected product.
| Vendor | six apart ltd. |
| Product | movable type |
| Published | Nov 12, 2026 |
Stay Ahead of the Next One
Get instant alerts for six apart ltd. movable type
Be the first to know when new high vulnerabilities affecting six apart ltd. movable type are published — delivered to Slack, Telegram or Discord.
Get Free Alerts →
Free · No credit card · 60 sec setup
CVSS v3 Breakdown
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L Affected Versions
Six Apart Ltd. / Movable Type
8.8.0 ≤ 8.8.6
Six Apart Ltd. / Movable Type Advanced
8.8.0 ≤ 8.8.6
Six Apart Ltd. / Movable Type
8.0.0 ≤ 8.0.13
Six Apart Ltd. / Movable Type Advanced
8.0.0 ≤ 8.0.13
Six Apart Ltd. / Movable Type Premium
2.00 ≤ 2.18
Six Apart Ltd. / Movable Type Premium Advanced Edition
2.00 ≤ 2.18