CVE-2026-103668: SQL Injection
Published Oct 7, 2026
·Updated
An SQL Injection vulnerability exists in the Site Search function of Movable Type, which may allow an unauthenticated attacker to execute an arbitrary SQL query on the affected product.
Affected Software
1 affected component
Movable Type Movable Type
Event History
Oct 7, 2026
CVE Published
via MITRE·10:19 AM
Data Sourced
via MITRE·10:19 AM
DescriptionSeverity
Data Sourced
via NVD·11:17 AM
DescriptionSeverityWeakness
Frequently Asked Questions
1
Who can exploit this issue?
An unauthenticated remote attacker can exploit the SQL injection through the Site Search function. No privileges or user interaction are required.
2
What impact could successful exploitation have?
The vulnerability may allow execution of arbitrary SQL queries on the affected Movable Type product. The supplied severity vector indicates high confidentiality impact and low integrity and availability impact.