High severity8.6NVD Advisory· Published Oct 7, 2026

CVE-2026-103668

Description

An SQL Injection vulnerability exists in the Site Search function of Movable Type, which may allow an unauthenticated attacker to execute an arbitrary SQL query on the affected product.

Affected products

Movabletype/Movable Typellm-fuzzy

Patches

Vulnerability mechanics

References

jvn.jp/en/jp/JVN91153973/nvd
movabletype.org/news/2026/10/mt-930-released.htmlnvd
www.sixapart.jp/movabletype/news/2026/10/07-1100.htmlnvd

News mentions

No linked articles in our index yet.

cvss	0.559
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000