« Volver al listado

CVE-2026-23704

Estado: AplazadaMedia (5.1)—

A non-administrative user can upload malicious files. When an administrator or the product accesses that file, an arbitrary script may be executed on the administrator's browser. Note that Movable Type 7 series and 8.4 series, which are End-of-Life (EOL), are affected by the vulnerability as well.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (1)

⚠ Inferidas por IA a partir de la descripción — NVD aún no ha analizado esta CVE; no son CPE verificados.

Movabletype — Movable TypeAI

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2026-23704",
  "cveTags": [],
  "metrics": {
    "ssvcV203": [
      {
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "ssvcData": {
          "id": "CVE-2026-23704",
          "role": "CISA Coordinator",
          "options": [
            {
              "exploitation": "none"
            },
            {
              "automatable": "no"
            },
            {
              "technicalImpact": "partial"
            }
          ],
          "version": "2.0.3",
          "timestamp": "2026-02-04T16:07:20.323679Z"
        }
      }
    ],
    "cvssMetricV30": [
      {
        "type": "Secondary",
        "source": "vultures@jpcert.or.jp",
        "cvssData": {
          "scope": "CHANGED",
          "version": "3.0",
          "baseScore": 6.5,
          "attackVector": "NETWORK",
          "baseSeverity": "MEDIUM",
          "vectorString": "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L",
          "integrityImpact": "LOW",
          "userInteraction": "REQUIRED",
          "attackComplexity": "LOW",
          "availabilityImpact": "LOW",
          "privilegesRequired": "LOW",
          "confidentialityImpact": "LOW"
        },
        "impactScore": 3.7,
        "exploitabilityScore": 2.3
      }
    ],
    "cvssMetricV40": [
      {
        "type": "Secondary",
        "source": "vultures@jpcert.or.jp",
        "cvssData": {
          "Safety": "NOT_DEFINED",
          "version": "4.0",
          "Recovery": "NOT_DEFINED",
          "baseScore": 5.1,
          "Automatable": "NOT_DEFINED",
          "attackVector": "NETWORK",
          "baseSeverity": "MEDIUM",
          "valueDensity": "NOT_DEFINED",
          "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:N/VI:N/VA:N/SC:L/SI:L/SA:L/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
          "exploitMaturity": "NOT_DEFINED",
          "providerUrgency": "NOT_DEFINED",
          "userInteraction": "PASSIVE",
          "attackComplexity": "LOW",
          "attackRequirements": "NONE",
          "privilegesRequired": "LOW",
          "subIntegrityImpact": "LOW",
          "vulnIntegrityImpact": "NONE",
          "integrityRequirement": "NOT_DEFINED",
          "modifiedAttackVector": "NOT_DEFINED",
          "subAvailabilityImpact": "LOW",
          "vulnAvailabilityImpact": "NONE",
          "availabilityRequirement": "NOT_DEFINED",
          "modifiedUserInteraction": "NOT_DEFINED",
          "modifiedAttackComplexity": "NOT_DEFINED",
          "subConfidentialityImpact": "LOW",
          "vulnConfidentialityImpact": "NONE",
          "confidentialityRequirement": "NOT_DEFINED",
          "modifiedAttackRequirements": "NOT_DEFINED",
          "modifiedPrivilegesRequired": "NOT_DEFINED",
          "modifiedSubIntegrityImpact": "NOT_DEFINED",
          "modifiedVulnIntegrityImpact": "NOT_DEFINED",
          "vulnerabilityResponseEffort": "NOT_DEFINED",
          "modifiedSubAvailabilityImpact": "NOT_DEFINED",
          "modifiedVulnAvailabilityImpact": "NOT_DEFINED",
          "modifiedSubConfidentialityImpact": "NOT_DEFINED",
          "modifiedVulnConfidentialityImpact": "NOT_DEFINED"
        }
      }
    ]
  },
  "affected": [
    {
      "source": "vultures@jpcert.or.jp",
      "affectedData": [
        {
          "vendor": "Six Apart Ltd.",
          "product": "Movable Type (Software Edition)",
          "versions": [
            {
              "status": "affected",
              "version": "9.0.4 to 9.0.5 (9.0 series)"
            },
            {
              "status": "affected",
              "version": "8.8.0 to 8.8.1 (8.8 series)"
            },
            {
              "status": "affected",
              "version": "8.0.2 to 8.0.8 (8.0 series)"
            }
          ]
        },
        {
          "vendor": "Six Apart Ltd.",
          "product": "Movable Type Advanced (Software Edition)",
          "versions": [
            {
              "status": "affected",
              "version": "9.0.4 to 9.0.5 (9.0 series)"
            },
            {
              "status": "affected",
              "version": "8.8.0 to 8.8.1 (8.8 series)"
            },
            {
              "status": "affected",
              "version": "8.0.2 to 8.0.8 (8.0 series)"
            }
          ]
        },
        {
          "vendor": "Six Apart Ltd.",
          "product": "Movable Type Premium (Software Edition)",
          "versions": [
            {
              "status": "affected",
              "version": "9.0.4 (MTP 9.0 series)"
            },
            {
              "status": "affected",
              "version": "2.13 and earlier (MTP 2 series)"
            }
          ]
        },
        {
          "vendor": "Six Apart Ltd.",
          "product": "Movable Type Premium (Advanced Edition) (Software Edition)",
          "versions": [
            {
              "status": "affected",
              "version": "9.0.4 (MTP 9.0 series)"
            },
            {
              "status": "affected",
              "version": "2.13 and earlier (MTP 2 series)"
            }
          ]
        },
        {
          "vendor": "Six Apart Ltd.",
          "product": "Movable Type (Cloud Edition)",
          "versions": [
            {
              "status": "affected",
              "version": "9.0.5 (9 series)"
            },
            {
              "status": "affected",
              "version": "8.8.1 (8 series)"
            }
          ]
        },
        {
          "vendor": "Six Apart Ltd.",
          "product": "Movable Type Premium (Cloud Edition)",
          "versions": [
            {
              "status": "affected",
              "version": "9.0.5 (9 series)"
            },
            {
              "status": "affected",
              "version": "2.12 (MTP 2 series)"
            }
          ]
        }
      ]
    }
  ],
  "published": "2026-02-04T07:16:01.387",
  "references": [
    {
      "url": "https://jvn.jp/en/jp/JVN45405689/",
      "source": "vultures@jpcert.or.jp"
    },
    {
      "url": "https://movabletype.org/news/2026/02/mt-906-released.html",
      "source": "vultures@jpcert.or.jp"
    },
    {
      "url": "https://www.sixapart.jp/movabletype/news/2026/02/04-1100.html",
      "source": "vultures@jpcert.or.jp"
    }
  ],
  "vulnStatus": "Deferred",
  "weaknesses": [
    {
      "type": "Secondary",
      "source": "vultures@jpcert.or.jp",
      "description": [
        {
          "lang": "en",
          "value": "CWE-434"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "A non-administrative user can upload malicious files. When an administrator or the product accesses that file, an arbitrary script may be executed on the administrator's browser. Note that Movable Type 7 series and 8.4 series, which are End-of-Life (EOL), are affected by the vulnerability as well."
    },
    {
      "lang": "es",
      "value": "Un usuario no administrativo puede cargar archivos maliciosos. Cuando un administrador o el producto accede a ese archivo, un script arbitrario puede ejecutarse en el navegador del administrador. Tenga en cuenta que las series Movable Type 7 y 8.4, que están al final de su vida útil (EOL), también se ven afectadas por la vulnerabilidad."
    }
  ],
  "lastModified": "2026-06-17T10:21:58.577",
  "sourceIdentifier": "vultures@jpcert.or.jp"
}