https://vulnerability.circl.lu Contains only the most 10 recent sightings. http://www.rssboard.org/rss-specification python-feedgen en Thu, 08 Oct 2026 03:54:34 +0000 https://vulnerability.circl.lu/sighting/0a4ee679-e377-4f34-b15c-85743dc5b2d0/export {"uuid": "0a4ee679-e377-4f34-b15c-85743dc5b2d0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-96408", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mxd7wjvkh224", "content": "CVE-2026-96408 - movable type cloud edition\nThe upgrade script in Movable Type can be tricked into running any Perl program or database command, even by someone without a login. This could let an attacker take\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#sixapart #CVE #infosec", "creation_timestamp": "2026-10-08T00:40:05.059917Z"} {"uuid": "0a4ee679-e377-4f34-b15c-85743dc5b2d0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-96408", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mxd7wjvkh224", "content": "CVE-2026-96408 - movable type cloud edition\nThe upgrade script in Movable Type can be tricked into running any Perl program or database command, even by someone without a login. This could let an attacker take\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#sixapart #CVE #infosec", "creation_timestamp": "2026-10-08T00:40:05.059917Z"} https://vulnerability.circl.lu/sighting/0a4ee679-e377-4f34-b15c-85743dc5b2d0/export Thu, 08 Oct 2026 00:40:05 +0000 https://vulnerability.circl.lu/sighting/5b5cd1ec-a909-4faa-8e53-f995087c1cf5/export {"uuid": "5b5cd1ec-a909-4faa-8e53-f995087c1cf5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-96408", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mxc2j7x6or2j", "content": "Movable Type Cloud Edition (2.0 \u2013 9.2.1) faces a CRITICAL code injection flaw (CVE-2026-96408). Unauthenticated code execution possible. No patch; restrict upgrade script access now. https://radar.offseq.com/threat/cve-2026-96408-code-injection-in-six-apart-ltd-movable-type-cloud-edition-535c78e6...", "creation_timestamp": "2026-10-07T13:30:30.607140Z"} {"uuid": "5b5cd1ec-a909-4faa-8e53-f995087c1cf5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-96408", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mxc2j7x6or2j", "content": "Movable Type Cloud Edition (2.0 \u2013 9.2.1) faces a CRITICAL code injection flaw (CVE-2026-96408). Unauthenticated code execution possible. No patch; restrict upgrade script access now. https://radar.offseq.com/threat/cve-2026-96408-code-injection-in-six-apart-ltd-movable-type-cloud-edition-535c78e6...", "creation_timestamp": "2026-10-07T13:30:30.607140Z"} https://vulnerability.circl.lu/sighting/5b5cd1ec-a909-4faa-8e53-f995087c1cf5/export Wed, 07 Oct 2026 13:30:30 +0000 https://vulnerability.circl.lu/sighting/ed098b04-0f4d-476c-8899-ced64333d702/export {"uuid": "ed098b04-0f4d-476c-8899-ced64333d702", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-96408", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/117399868388265119", "content": "CVE-2026-96408 (CRITICAL): Movable Type Cloud Edition (v2.0 \u2013 9.2.1) hit by code injection in upgrade script \u2014 unauthenticated attackers can execute Perl/SQL. No patch yet; restrict script access. https://radar.offseq.com/threat/cve-2026-96408-code-injection-in-six-apart-ltd-movable-type-cloud-edition-535c78e66ddee34d #OffSeq #CVE202696408 #infosec #vuln", "creation_timestamp": "2026-10-07T13:30:28.415075Z"} {"uuid": "ed098b04-0f4d-476c-8899-ced64333d702", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-96408", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/117399868388265119", "content": "CVE-2026-96408 (CRITICAL): Movable Type Cloud Edition (v2.0 \u2013 9.2.1) hit by code injection in upgrade script \u2014 unauthenticated attackers can execute Perl/SQL. No patch yet; restrict script access. https://radar.offseq.com/threat/cve-2026-96408-code-injection-in-six-apart-ltd-movable-type-cloud-edition-535c78e66ddee34d #OffSeq #CVE202696408 #infosec #vuln", "creation_timestamp": "2026-10-07T13:30:28.415075Z"} https://vulnerability.circl.lu/sighting/ed098b04-0f4d-476c-8899-ced64333d702/export Wed, 07 Oct 2026 13:30:28 +0000 https://vulnerability.circl.lu/sighting/518c92a6-e137-448d-918c-b85a32d006db/export {"uuid": "518c92a6-e137-448d-918c-b85a32d006db", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-96408", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/5cxonghh4wohs", "content": "CVE-2026-96408 - Movable Type Code Injection Vulnerability\nCVE ID : CVE-2026-96408\n \n Published : Oct. 7, 2026, 10:18 a.m. | 1\u00a0hour, 10\u00a0minutes ago\n \n Description : A code injection vulnerability exists in the upgrade script of Movable Type, which may allow an unauthenticated ...", "creation_timestamp": "2026-10-07T11:53:18.957333Z"} {"uuid": "518c92a6-e137-448d-918c-b85a32d006db", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-96408", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/5cxonghh4wohs", "content": "CVE-2026-96408 - Movable Type Code Injection Vulnerability\nCVE ID : CVE-2026-96408\n \n Published : Oct. 7, 2026, 10:18 a.m. | 1\u00a0hour, 10\u00a0minutes ago\n \n Description : A code injection vulnerability exists in the upgrade script of Movable Type, which may allow an unauthenticated ...", "creation_timestamp": "2026-10-07T11:53:18.957333Z"} https://vulnerability.circl.lu/sighting/518c92a6-e137-448d-918c-b85a32d006db/export Wed, 07 Oct 2026 11:53:18 +0000 https://vulnerability.circl.lu/sighting/12ac4e7d-b8ee-4a1c-a677-c93b6a562240/export {"uuid": "12ac4e7d-b8ee-4a1c-a677-c93b6a562240", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-96408", "type": "seen", "source": "https://jvn.jp/en/jp/JVN91153973", "content": "", "creation_timestamp": "2026-10-06T22:00:00.000000Z"} {"uuid": "12ac4e7d-b8ee-4a1c-a677-c93b6a562240", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-96408", "type": "seen", "source": "https://jvn.jp/en/jp/JVN91153973", "content": "", "creation_timestamp": "2026-10-06T22:00:00.000000Z"} https://vulnerability.circl.lu/sighting/12ac4e7d-b8ee-4a1c-a677-c93b6a562240/export Tue, 06 Oct 2026 22:00:00 +0000