CVE-20XX-?

Progress Moveit Transfer CVEs.

Published CVEs affecting Progress Moveit Transfer, ranked by exploit odds.

27 CVEs · updated 2026-11-06 01:30 UTC

  1. CVE-2026-10698

    Improper Neutralization of Special Elements in Data Query Logic vulnerability in Progress MOVEit Transfer (Custom Reports modules). This issue affects MOVEit Transfer: from 2025.0.0 before 2025.0.8, from 2025.1.0 before 2025.1.4, from 2026.0.0 before 2026.0.1.

    Progress Moveit Transfer

    7.2 HIGH 0.6% exploit odds Fix listed
  2. CVE-2026-8650

    Relative path traversal vulnerability in Progress MOVEit Transfer (Admin Settings module). This issue affects MOVEit Transfer: before 2025.0.7, from 2025.1.0 before 2025.1.3.

    Progress Moveit Transfer

    4.5 MEDIUM 0.6% exploit odds No fix listed
  3. CVE-2026-10697

    Improper Authentication vulnerability in Progress MOVEit Transfer. This issue affects MOVEit Transfer: before 2025.1.5, from 2026.0.0 before 2026.0.3.

    Progress Moveit Transfer

    7.5 HIGH 0.6% exploit odds Fix listed
  4. CVE-2026-8801

    Path equivalence: vulnerability in Progress MOVEit Transfer (File Upload modules). This issue affects MOVEit Transfer: before 2025.0.8, from 2025.1.0 before 2025.1.4.

    Progress Moveit Transfer

    3.5 LOW 0.5% exploit odds No fix listed
  5. CVE-2026-89068

    Missing critical step in authentication vulnerability in Progress MOVEit Transfer (LDAP module). This issue affects MOVEit Transfer: before 2025.1.6 and from 2026.0.0 before 2026.0.4.

    Auth & access Progress Moveit Transfer

    8.1 HIGH 0.5% exploit odds Fix listed
  6. CVE-2026-89067

    Authentication bypass using an alternate path or channel vulnerability in Progress MOVEit Transfer. This issue affects MOVEit Transfer: before 2025.1.6 and from 2026.0.0 before 2026.0.4.

    Auth & access Progress Moveit Transfer

    8.8 HIGH 0.5% exploit odds Fix listed
  7. CVE-2026-89071

    Improper neutralization of special elements used in an LDAP query ('LDAP injection') vulnerability in Progress MOVEit Transfer (LDAP module). This issue affects MOVEit Transfer: before 2025.1.6 and from 2026.0.0 before 2026.0.4.

    Injection Library Progress Moveit Transfer

    7.5 HIGH 0.5% exploit odds Fix listed
  8. CVE-2026-89076

    Improper neutralization of special elements used in an SQL command ('SQL injection') vulnerability in Progress MOVEit Transfer (Custom Reports module). This issue affects MOVEit Transfer: before 2025.1.6 and from 2026.0.0 before 2026.0.4.

    Injection Progress Moveit Transfer

    7.2 HIGH 0.5% exploit odds Fix listed
  9. CVE-2026-10699

    Missing release of memory after effective lifetime vulnerability in Progress MOVEit Transfer (Custom Reports modules). This issue affects MOVEit Transfer: from 2025.0.0 before 2025.0.8, from 2025.1.0 before 2025.1.4, from 2026.0.0 before 2026.0.1.

    Progress Moveit Transfer

    7.5 HIGH 0.5% exploit odds Fix listed
  10. CVE-2026-89074

    Improper handling of unicode encoding vulnerability in Progress MOVEit Transfer. This issue affects MOVEit Transfer: before 2025.1.6 and from 2026.0.0 before 2026.0.4.

    Other Progress Moveit Transfer

    7.5 HIGH 0.5% exploit odds Fix listed
  11. CVE-2026-89077

    Incorrect implementation of authentication algorithm vulnerability in Progress MOVEit Transfer (SFTP module). This issue affects MOVEit Transfer: before 2025.1.6 and from 2026.0.0 before 2026.0.4.

    Auth & access Progress Moveit Transfer

    7.5 HIGH 0.5% exploit odds Fix listed
  12. CVE-2026-8649

    Improper Neutralization of Special Elements in Data Query Logic vulnerability in Progress MOVEit Transfer (Custom Reports modules). This issue affects MOVEit Transfer: before 2025.0.7, from 2025.1.0 before 2025.1.3.

    Progress Moveit Transfer

    6.4 MEDIUM 0.5% exploit odds Fix listed
  13. CVE-2026-89070

    Authentication bypass by capture-replay vulnerability in Progress MOVEit Transfer (OIDC module). This issue affects MOVEit Transfer: before 2025.1.6 and from 2026.0.0 before 2026.0.4.

    Auth & access Library Progress Moveit Transfer

    7.5 HIGH 0.4% exploit odds Fix listed
  14. CVE-2026-89069

    Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in Progress MOVEit Transfer (Ad Hoc module). This issue affects MOVEit Transfer: before 2025.1.6 and from 2026.0.0 before 2026.0.4.

    XSS Library Progress Moveit Transfer

    8.0 HIGH 0.4% exploit odds Fix listed
  15. CVE-2026-11903

    Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in Progress MOVEit Transfer (Ad Hoc module). This issue affects MOVEit Transfer: from 2026.0.0 before 2026.0.1, from 2025.1.0 before 2025.1.4, from 2025.0.0 before 2025.0.8.

    Progress Moveit Transfer

    8.0 HIGH 0.4% exploit odds Fix listed
  16. CVE-2026-89073

    Insufficient Session Expiration vulnerability in Progress MOVEit Transfer. This issue affects MOVEit Transfer: before 2025.1.6 and from 2026.0.0 before 2026.0.4.

    Other Progress Moveit Transfer

    7.5 HIGH 0.4% exploit odds Fix listed
  17. CVE-2026-15966

    Permissive cross-domain security policy with untrusted domains vulnerability in Progress MOVEit Transfer. This issue affects MOVEit Transfer: before 2025.1.5, from 2026.0.0 before 2026.0.3.

    Progress Moveit Transfer

    7.5 HIGH 0.4% exploit odds Fix listed
  18. CVE-2026-15967

    Insufficient session expiration vulnerability in Progress MOVEit Transfer. This issue affects MOVEit Transfer: before 2025.1.5, from 2026.0.0 before 2026.0.3.

    Progress Moveit Transfer

    7.5 HIGH 0.4% exploit odds Fix listed
  19. CVE-2026-8800

    Incorrect Authorization vulnerability in Progress MOVEit Transfer (Audit User module). This issue affects MOVEit Transfer: before 2025.0.7, from 2025.1.0 before 2025.1.3.

    Progress Moveit Transfer

    2.7 LOW 0.4% exploit odds No fix listed
  20. CVE-2026-8651

    Limited authentication bypass by spoofing vulnerability in Progress MOVEit Transfer (HTTPS module). This issue affects MOVEit Transfer: before 2025.0.7, from 2025.1.0 before 2025.1.3.

    Progress Moveit Transfer

    3.7 LOW 0.4% exploit odds No fix listed
  21. CVE-2026-15968

    Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in Progress MOVEit Transfer. This issue affects MOVEit Transfer: before 2025.1.5, from 2026.0.0 before 2026.0.3.

    Progress Moveit Transfer

    7.1 HIGH 0.3% exploit odds Fix listed
  22. CVE-2025-13147

    Server-Side Request Forgery (SSRF) vulnerability in Progress MOVEit Transfer.This issue affects MOVEit Transfer: before 2024.1.8, from 2025.0.0 before 2025.0.4.

    Progress Moveit Transfer

    5.3 MEDIUM 0.3% exploit odds No fix listed
  23. CVE-2025-2324

    Improper Privilege Management vulnerability for users configured as Shared Accounts in Progress MOVEit Transfer (SFTP module) allows Privilege Escalation.This issue affects MOVEit Transfer: from 2023.1.0 before 2023.1.12, from 2024.0.0 before 2024.0.8, from 2024.1.0 before 2024.1.2.

    Progress Moveit Transfer

    5.9 MEDIUM 0.3% exploit odds Fix listed
  24. CVE-2026-89072

    Incorrect Authorization vulnerability in Progress MOVEit Transfer (Client Certificates module). This issue affects MOVEit Transfer: before 2025.1.6 and from 2026.0.0 before 2026.0.4.

    Auth & access Progress Moveit Transfer

    7.5 HIGH 0.2% exploit odds Fix listed
  25. CVE-2025-11235

    Unverified Password Change vulnerability in Progress MOVEit Transfer on Windows (REST API modules).This issue affects MOVEit Transfer: from 2023.1.0 before 2023.1.3, from 2023.0.0 before 2023.0.8, from 2022.1.0 before 2022.1.11, from 2022.0.0 before 2022.0.10.

    Progress Moveit Transfer

    3.7 LOW 0.2% exploit odds No fix listed
  26. CVE-2026-89075

    Insecure Storage of Sensitive Information vulnerability in Progress MOVEit Transfer. This issue affects MOVEit Transfer: before 2025.1.6 and from 2026.0.0 before 2026.0.4.

    Disclosure Progress Moveit Transfer

    7.3 HIGH 0.2% exploit odds Fix listed
  27. CVE-2026-87093

    Incorrect Permission Assignment for Critical Resource vulnerability in Progress MOVEit Transfer. This issue affects MOVEit Transfer: before 2025.1.6 and from 2026.0.0 before 2026.0.4.

    Other Progress Moveit Transfer

    8.8 HIGH 0.2% exploit odds Fix listed

All CVEs affecting Progress Moveit Transfer that appear in CVE.org and NVD, sorted by how likely they are to be exploited (EPSS), with fix status and timeline.