CVE-2026-33088

Description

Movable Type provided by Six Apart Ltd. contains an SQL Injection vulnerability which may allow an attacker to execute an arbitrary SQL statement.

Affected Platforms

Weakness Type

CWE-89

References

• https://jvn.jp/en/jp/JVN66473735/
• https://movabletype.org/news/2026/04/mt-907-released.html
• https://www.sixapart.jp/movabletype/news/2026/04/08-1100.html