{"vulnerability": "CVE-2026-96408", "sightings": [{"uuid": "12ac4e7d-b8ee-4a1c-a677-c93b6a562240", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-96408", "type": "seen", "source": "https://jvn.jp/en/jp/JVN91153973", "content": "", "creation_timestamp": "2026-10-06T22:00:00.000000Z"}, {"uuid": "518c92a6-e137-448d-918c-b85a32d006db", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-96408", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/5cxonghh4wohs", "content": "CVE-2026-96408 - Movable Type Code Injection Vulnerability\nCVE ID : CVE-2026-96408\n \n Published : Oct. 7, 2026, 10:18 a.m. | 1\u00a0hour, 10\u00a0minutes ago\n \n Description : A code injection vulnerability exists in the upgrade script of Movable Type, which may allow an unauthenticated ...", "creation_timestamp": "2026-10-07T11:53:18.957333Z"}, {"uuid": "ed098b04-0f4d-476c-8899-ced64333d702", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-96408", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/117399868388265119", "content": "CVE-2026-96408 (CRITICAL): Movable Type Cloud Edition (v2.0 \u2013 9.2.1) hit by code injection in upgrade script \u2014 unauthenticated attackers can execute Perl/SQL. No patch yet; restrict script access. https://radar.offseq.com/threat/cve-2026-96408-code-injection-in-six-apart-ltd-movable-type-cloud-edition-535c78e66ddee34d #OffSeq #CVE202696408 #infosec #vuln", "creation_timestamp": "2026-10-07T13:30:28.415075Z"}, {"uuid": "5b5cd1ec-a909-4faa-8e53-f995087c1cf5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-96408", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mxc2j7x6or2j", "content": "Movable Type Cloud Edition (2.0 \u2013 9.2.1) faces a CRITICAL code injection flaw (CVE-2026-96408). Unauthenticated code execution possible. No patch; restrict upgrade script access now. https://radar.offseq.com/threat/cve-2026-96408-code-injection-in-six-apart-ltd-movable-type-cloud-edition-535c78e6...", "creation_timestamp": "2026-10-07T13:30:30.607140Z"}]}