progress

12 records · 0 with a public proof-of-concept

Disclosed vulnerabilities where the NVD names progress as an affected vendor, highest CVSS first.

  1. HIGH 8.8CVE-2026-890672026-10-14

    Authentication bypass using an alternate path or channel vulnerability in Progress MOVEit Transfer. This issue affects MOVEit Transfer: before 2025.1.6 and from 2026.0.0 before 2026.0.4.

    moveit transfer

    AI risk analysis on Exploit-DB.ai →

  2. HIGH 8.8CVE-2026-870932026-10-14

    Incorrect Permission Assignment for Critical Resource vulnerability in Progress MOVEit Transfer. This issue affects MOVEit Transfer: before 2025.1.6 and from 2026.0.0 before 2026.0.4.

    moveit transfer

    AI risk analysis on Exploit-DB.ai →

  3. HIGH 8.1CVE-2026-890682026-10-14

    Missing critical step in authentication vulnerability in Progress MOVEit Transfer (LDAP module). This issue affects MOVEit Transfer: before 2025.1.6 and from 2026.0.0 before 2026.0.4.

    moveit transfer

    AI risk analysis on Exploit-DB.ai →

  4. HIGH 8CVE-2026-890692026-10-14

    Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in Progress MOVEit Transfer (Ad Hoc module). This issue affects MOVEit Transfer: before 2025.1.6 and from 2026.0.0 before 2026.0.4.

    moveit transfer

    AI risk analysis on Exploit-DB.ai →

  5. HIGH 7.5CVE-2026-890772026-10-14

    Incorrect implementation of authentication algorithm vulnerability in Progress MOVEit Transfer (SFTP module). This issue affects MOVEit Transfer: before 2025.1.6 and from 2026.0.0 before 2026.0.4.

    moveit transfer

    AI risk analysis on Exploit-DB.ai →

  6. HIGH 7.5CVE-2026-890742026-10-14

    Improper handling of unicode encoding vulnerability in Progress MOVEit Transfer. This issue affects MOVEit Transfer: before 2025.1.6 and from 2026.0.0 before 2026.0.4.

    moveit transfer

    AI risk analysis on Exploit-DB.ai →

  7. HIGH 7.5CVE-2026-890732026-10-14

    Insufficient Session Expiration vulnerability in Progress MOVEit Transfer. This issue affects MOVEit Transfer: before 2025.1.6 and from 2026.0.0 before 2026.0.4.

    moveit transfer

    AI risk analysis on Exploit-DB.ai →

  8. HIGH 7.5CVE-2026-890722026-10-14

    Incorrect Authorization vulnerability in Progress MOVEit Transfer (Client Certificates module). This issue affects MOVEit Transfer: before 2025.1.6 and from 2026.0.0 before 2026.0.4.

    moveit transfer

    AI risk analysis on Exploit-DB.ai →

  9. HIGH 7.5CVE-2026-890712026-10-14

    Improper neutralization of special elements used in an LDAP query ('LDAP injection') vulnerability in Progress MOVEit Transfer (LDAP module). This issue affects MOVEit Transfer: before 2025.1.6 and from 2026.0.0 before 2026.0.4.

    moveit transfer

    AI risk analysis on Exploit-DB.ai →

  10. HIGH 7.5CVE-2026-890702026-10-14

    Authentication bypass by capture-replay vulnerability in Progress MOVEit Transfer (OIDC module). This issue affects MOVEit Transfer: before 2025.1.6 and from 2026.0.0 before 2026.0.4.

    moveit transfer

    AI risk analysis on Exploit-DB.ai →

  11. HIGH 7.3CVE-2026-890752026-10-14

    Insecure Storage of Sensitive Information vulnerability in Progress MOVEit Transfer. This issue affects MOVEit Transfer: before 2025.1.6 and from 2026.0.0 before 2026.0.4.

    moveit transfer

    AI risk analysis on Exploit-DB.ai →

  12. HIGH 7.2CVE-2026-890762026-10-14

    Improper neutralization of special elements used in an SQL command ('SQL injection') vulnerability in Progress MOVEit Transfer (Custom Reports module). This issue affects MOVEit Transfer: before 2025.1.6 and from 2026.0.0 before 2026.0.4.

    moveit transfer

    AI risk analysis on Exploit-DB.ai →