A vulnerability was found in Six Apart Movable Type, Movable Type Advanced and Movable Type Premium 8.4 and classified as critical. Impacted is an unknown function. The manipulation results in unrestricted upload. This vulnerability only affects products that are no longer supported by the maintainer.
This vulnerability is known as CVE-2026-23704. It is possible to launch the attack remotely. No exploit is available.
