CVE Catalog
CVE-2026-33088
CriticalCVSS 9.8Exploitation Probability (EPSS)
Low risk0.35%
28th percentile - higher than 28% of all known CVEs
Summary
Movable Type by Six Apart Ltd. contains an SQL injection vulnerability that may allow an attacker to execute arbitrary SQL statements.
Risk Assessment
An attacker can read, modify, or delete data from the database, potentially compromising data confidentiality and integrity.
Recommendation
Apply security patches provided by Six Apart Ltd. for Movable Type that fix the SQL injection vulnerability.
Original NVD description (English source)
Movable Type provided by Six Apart Ltd. contains an SQL Injection vulnerability which may allow an attacker to execute an arbitrary SQL statement.