https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-12T08:26:34.936426+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-123335 EUVD-2026-123335 2026-10-12T08:26:34.940586+00:00 EUVD-2026-123335 https://cve.radiocsirt.org/vuln/fkie_cve-2009-2481 fkie_cve-2009-2481 2026-10-12T08:26:34.940631+00:00

mt-wizard.cgi in Six Apart Movable Type before 4.261, when global templates are not initialized, allows remote attackers to bypass access restrictions and (1) send e-mail to arbitrary addresses or (2) obtain sensitive information via unspecified vectors.

 https://cve.radiocsirt.org/vuln/ghsa-6q93-7ff8-58mr GHSA-6q93-7ff8-58mr 2026-10-12T08:26:34.940696+00:00

mt-wizard.cgi in Six Apart Movable Type before 4.261, when global templates are not initialized, allows remote attackers to bypass access restrictions and (1) send e-mail to arbitrary addresses or (2) obtain sensitive information via unspecified vectors.

 https://cve.radiocsirt.org/vuln/gsd-2009-2481 gsd-2009-2481 2026-10-12T08:26:34.940730+00:00 gsd-2009-2481 https://cve.radiocsirt.org/vuln/jvndb-2009-000043 jvndb-2009-000043 2026-10-12T08:26:34.940749+00:00

Movable Type contains an access restriction bypass vulnerability. Movable Type, a web log system from Six Apart KK, contains a vulnerability that allows a remote attacker to bypass access restrictions. A successful attack requires mt-wizard.cgi not to be deleted after initial setup. For more information, refer to the developer's website. Masashi Shiraishi reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning Partnership.