Vulnerability Description
Missing authorization vulnerability exists in Movable Type. Under certain conditions, when a user without administrator privileges signs in to the product, unintended update processing may be executed.
CVSS Score
4.3
MEDIUM
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
Related Weaknesses (CWE)
References
- https://jvn.jp/en/jp/JVN66473735/
- https://movabletype.org/news/2026/05/mt-908-released.html
- https://www.sixapart.jp/movabletype/news/2026/05/20-1100.html
FAQ
What is CVE-2026-44392?
CVE-2026-44392 is a vulnerability with a CVSS score of 4.3 (MEDIUM). Missing authorization vulnerability exists in Movable Type. Under certain conditions, when a user without administrator privileges signs in to the product, unintended update processing may be executed...
How severe is CVE-2026-44392?
CVE-2026-44392 has been rated MEDIUM with a CVSS base score of 4.3/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2026-44392?
Check the references section above for vendor advisories and patch information. Review vendor security bulletins for remediation guidance.