CVE Catalog
CVE-2026-44392
MediumCVSS 4.3Exploitation Probability (EPSS)
Low risk0.25%
16th percentile - higher than 16% of all known CVEs
Summary
Missing authorization in Movable Type allows a user without admin privileges to perform unintended updates after signing in.
Risk Assessment
Risk of unauthorized modification of data or system configuration by a regular user.
Recommendation
Update Movable Type to the latest patched version.
Original NVD description (English source)
Missing authorization vulnerability exists in Movable Type. Under certain conditions, when a user without administrator privileges signs in to the product, unintended update processing may be executed.