2. ݡ
  4. ڽסMovable TypeȼCVE-2026-96408CVE-2026-103668ˤ˴ؤմˤĤơ2026ǯ1014

2026ǯ109
ڽסMovable TypeȼCVE-2026-96408CVE-2026-103668ˤ˴ؤմˤĤơ2026ǯ1014

ʿǤҥӥѤˤ꤬Ȥޤ

ΤӡƥĴƥMovable Typeפˤơιˤ軰ԤˤǤդΥɼ¹ԡWebȤξüˤǡ١Τ롢ȼCVE-2026-96408CVE-2026-103668ˤɽޤ

ȼǧڤɬפȤʲ˳СMovable Type֤Ƥ˹оݤȤʤޤ

ǤϡҥӥˤȼѤﳲϳǧƤޤ󤬡
Movable TypeѤΤͤϡޡǤؤΥåץǡк»ܤƤޤ褦ꤤ夲ޤ

----------------------------------------------------------------------
ɽ줿ȼ
CVE-2026-96408
åץ졼ɥץȡmt-upgrade.cgiˤˤơ
⡼ȥɼ¹ԤSQL¹Ԥ뤪줬ȼ
CVE-2026-103668
⸡mt-search.cgiˤˤơSQL¹Ԥ졢
ǡޤǡϤ뤪줬ȼ

ƶץ
mt-upgrade.cgi
mt-search.cgi
ȯǤϡºȤ mt-ftsearch.cgi ˤĤƤ
μǤޤϺ⤵Ƥޤ

ƶMovable TypeΥС
Movable TypeAdvanced Editionޤˡ
9.2.1
9.0.9
8.8.5
8.0.12
Movable Type PremiumAdvanced Editionޤˡ
9.2.1
9.0.9
2.17
ݡȤλСMovable Type 8.4.x7.x
Movable Type Premium 1.xˤƶޤǤ󶡤ޤ


Movable TypeAdvanced Editionޤˡ
9.3.0
9.0.10
8.8.6
8.0.13
Movable Type PremiumAdvanced Editionޤˡ
9.3.0
9.0.10
2.18

ͤؤΤꤤʽס
ȼѤꥹӶ۵Ƨޤ
ƶСMovable Type֤Ƥǽ륵Ȥоݤˡ
Ҥˤƻ֤Ȥ mt-upgrade.cgi Υѡߥå000פѹ饢Ǥʤ֤ˤƤޤ
ޤmt-search.cgimt-ftsearch.cgi˴ؤޤƤ⡢˱ƥѡߥå000פѹƤǽޤ

Ҥˤƥѡߥå000פѹե뤬ϡǤ
ѡߥå򸵤ᤷƤǡåץǡȤ򤪴ꤤޤ
ѡߥå󤬡000פΤޤޤǤϡǤΥե򥢥åץɤݤ
ե񤭤ǤåץǡȤ˴λʤ礬ޤ

ݡȤλСѤξϡǤ󶡤ʤᡢ
ݡΥСؤΰܹԤ򤴸Ƥ

ܺ٤ϡȯǤ륷åѡȳҤΰʲΤΤ餻
ǧ
https://www.sixapart.jp/movabletype/news/2026/10/07-1100.html
----------------------------------------------------------------------

⤪ͤ˰¿ƤѤ褦ӥӥƥθؤƤޤޤ
Ȥɤꤤ夲ޤ

1014
ϢȼCVE-2026-103668פɵޤ

Τ餻ȥåפ