CVE-2026-117687
HIGH
NVD
CVSS Score
7.3
Severity
HIGH
Published
Nov 12, 2026
Vendor
unknown
Description
Movable Type provided by Six Apart Ltd. contains a code injection vulnerability in its Dynamic Publishing functionality. By sending a specially crafted request that is processed by the Dynamic Publishing, an attacker may be able to execute arbitrary PHP code on the affected product.