Six Apart Ltd. - Movable Type Cloud Edition - CRITICAL - CVE-2026-96408. A code injection vulnerability has been identified in the upgrade script of Movable Type, enabling potential exploitation by unauthenticated attackers. This flaw allows unauthorized execution of arbitrary Perl scripts or SQL queries, posing significant risks to the integrity and security of the affected systems. Users are strongly advised to apply available updates and implement security measures to mitigate potential threats.