We have released Movable Type 8.8.7 and 8.0.14, a security fix included.
Six Apart recommends updating to the latest version.
Detail of the Issues
- PHP Code Execution in Dynamic Publishing: A vulnerability was found where PHP code contained in template processing results was executed for specific MT tags, modifiers, and error display processing (CVE-2026-117687, MTC-31851). This fix may affect the results of publishing websites and behavior in Dynamic Publishing.
RELEASED VERSIONS
- Movable Type 8.8.7
- Movable Type Advanced 8.8.7
- Movable Type AMI (via AWS Marketplace) 8.8.7
- Movable Type 8.0.14
- Movable Type Advanced 8.0.14
Note: Although the Movable Type 8.0 series reached EOL on November 5, 2026, version 8.0.14 is exceptionally provided as it has only recently reached EOL.
RELEASE NOTES
Please review the Movable Type release notes to see everything that was added and improved since the version you are currently using.
End of Maintenance
Please note the End of Maintenance (EOM) and End of Life (EOL) dates for the following versions:
- Movable Type 8.0.x: Reached EOM on November 6th, 2024, and reached EOL on November 5th, 2026. Version 8.0.14 is exceptionally provided as this series has only recently reached its EOL. We strongly recommend upgrading to Movable Type 8.8 or later to ensure continued security and support.
For more details on product support periods, please refer to the Movable Type Lifecycle Policy.
HOW TO GET MOVABLE TYPE
If you have an existing Movable Type license, you can download the latest Movable Type from our download portal using your Six Apart ID. To purchase a new license or an upgrade, please visit MovableType.com for more information, or feel free to contact us if you have any questions.
Six Apart CTO