CVE-2026-44392
MEDIUM
NVD
CVSS Score
4.3
Severity
MEDIUM
Published
May 20, 2026
Vendor
unknown
Description
Missing authorization vulnerability exists in Movable Type. Under certain conditions, when a user without administrator privileges signs in to the product, unintended update processing may be executed.