CVE-20XX-?
agent?

Progress Moveit Transfer CVEs.

Published CVEs affecting Progress Moveit Transfer, ranked by exploit odds.

12 CVEs · updated 2026-11-12 22:24 UTC

Reset all
  1. CVE-2026-89068

    Missing critical step in authentication vulnerability in Progress MOVEit Transfer (LDAP module). This issue affects MOVEit Transfer: before 2025.1.6 and from 2026.0.0 before 2026.0.4.

    Auth & access Progress Moveit Transfer

    8.1 HIGH 0.5% exploit odds Fix listed
  2. CVE-2026-89067

    Authentication bypass using an alternate path or channel vulnerability in Progress MOVEit Transfer. This issue affects MOVEit Transfer: before 2025.1.6 and from 2026.0.0 before 2026.0.4.

    Auth & access Progress Moveit Transfer

    8.8 HIGH 0.5% exploit odds Fix listed
  3. CVE-2026-89071

    Improper neutralization of special elements used in an LDAP query ('LDAP injection') vulnerability in Progress MOVEit Transfer (LDAP module). This issue affects MOVEit Transfer: before 2025.1.6 and from 2026.0.0 before 2026.0.4.

    Injection Library Progress Moveit Transfer

    7.5 HIGH 0.5% exploit odds Fix listed
  4. CVE-2026-89076

    Improper neutralization of special elements used in an SQL command ('SQL injection') vulnerability in Progress MOVEit Transfer (Custom Reports module). This issue affects MOVEit Transfer: before 2025.1.6 and from 2026.0.0 before 2026.0.4.

    Injection Progress Moveit Transfer

    7.2 HIGH 0.5% exploit odds Fix listed
  5. CVE-2026-89074

    Improper handling of unicode encoding vulnerability in Progress MOVEit Transfer. This issue affects MOVEit Transfer: before 2025.1.6 and from 2026.0.0 before 2026.0.4.

    Other Progress Moveit Transfer

    7.5 HIGH 0.5% exploit odds Fix listed
  6. CVE-2026-89077

    Incorrect implementation of authentication algorithm vulnerability in Progress MOVEit Transfer (SFTP module). This issue affects MOVEit Transfer: before 2025.1.6 and from 2026.0.0 before 2026.0.4.

    Auth & access Progress Moveit Transfer

    7.5 HIGH 0.5% exploit odds Fix listed
  7. CVE-2026-89070

    Authentication bypass by capture-replay vulnerability in Progress MOVEit Transfer (OIDC module). This issue affects MOVEit Transfer: before 2025.1.6 and from 2026.0.0 before 2026.0.4.

    Auth & access Library Progress Moveit Transfer

    7.5 HIGH 0.4% exploit odds Fix listed
  8. CVE-2026-89069

    Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in Progress MOVEit Transfer (Ad Hoc module). This issue affects MOVEit Transfer: before 2025.1.6 and from 2026.0.0 before 2026.0.4.

    XSS Library Progress Moveit Transfer

    8.0 HIGH 0.4% exploit odds Fix listed
  9. CVE-2026-89073

    Insufficient Session Expiration vulnerability in Progress MOVEit Transfer. This issue affects MOVEit Transfer: before 2025.1.6 and from 2026.0.0 before 2026.0.4.

    Other Progress Moveit Transfer

    7.5 HIGH 0.4% exploit odds Fix listed
  10. CVE-2026-89072

    Incorrect Authorization vulnerability in Progress MOVEit Transfer (Client Certificates module). This issue affects MOVEit Transfer: before 2025.1.6 and from 2026.0.0 before 2026.0.4.

    Auth & access Progress Moveit Transfer

    7.5 HIGH 0.2% exploit odds Fix listed
  11. CVE-2026-89075

    Insecure Storage of Sensitive Information vulnerability in Progress MOVEit Transfer. This issue affects MOVEit Transfer: before 2025.1.6 and from 2026.0.0 before 2026.0.4.

    Disclosure Progress Moveit Transfer

    7.3 HIGH 0.2% exploit odds Fix listed
  12. CVE-2026-87093

    Incorrect Permission Assignment for Critical Resource vulnerability in Progress MOVEit Transfer. This issue affects MOVEit Transfer: before 2025.1.6 and from 2026.0.0 before 2026.0.4.

    Other Progress Moveit Transfer

    8.8 HIGH 0.2% exploit odds Fix listed

All CVEs affecting Progress Moveit Transfer that appear in CVE.org and NVD, sorted by how likely they are to be exploited (EPSS), with fix status and timeline.