← Back to CVE search

CVE-2026-44392

Movable Type

Description

Missing authorization vulnerability exists in Movable Type. Under certain conditions, when a user without administrator privileges signs in to the product, unintended update processing may be executed.

CVSS 4.3EPSS 0.249%Risk 0.44
View source
Published
2026-05-20 07:16:15
Affected versions
unknown
Type
Core software
Last modified
2026-07-24 10:10:00
Vector
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N