CVE-2024-5806

CVE-2024-5806 progress moveit cve-2024-5806...

watchTowr-vs-progress-moveit_CVE-2024-5806

CVE-2024-5806 Exploit for Progress MOVEit Transfer CVE-2024-5806. See our blog post at TBD. PoC in Action See --help for, well, help. A typical run should look like this: python CVE-2024-5806.py --target-ip 192.168.1.1 --target-user user2 --ppk id.ppk --pem id / | | |\ \ \ / / \ \ / | | | | / ...

patch-CVE-2026-03200

Patch: CVE-2026-03200 Vulnerability Details CVE : CVE-2026-03200 Product : Progress MOVEit Description : SQL injection Severity : Critical Patch Status: DEPLOYED Field| Value ---|--- Patch Date| 2026-01-15 Status| deployed Deployed To| Production Validated By| SecOps Team References NVD CISA KEV...

Progress MOVEit Transfer SQL Injection

Progress MOVEit Transfer contains an unauthenticated SQL injection vulnerability that could allow unauthorized access to database information and exposure of sensitive data...

Progress MOVEit Transfer < 2025.1.6 / 2026.0.x < 2026.0.4 Multiple Vulnerabilities (September 2026)

The version of Progress MOVEit Transfer installed on the remote host is prior to 2025.1.6 or 2026.0.x prior to 2026.0.4. It is, therefore, affected by multiple vulnerabilities, including: - Authentication bypass using an alternate path or channel vulnerability in Progress MOVEit Transfer...

CVE-2026-89077

Incorrect implementation of authentication algorithm vulnerability in Progress MOVEit Transfer SFTP module. This issue affects MOVEit Transfer: before 2025.1.6 and from 2026.0.0 before 2026.0.4...

CVE-2026-89068

Missing critical step in authentication vulnerability in Progress MOVEit Transfer LDAP module. This issue affects MOVEit Transfer: before 2025.1.6 and from 2026.0.0 before 2026.0.4...

CVE-2026-89069

Improper neutralization of input during web page generation 'cross-site scripting' vulnerability in Progress MOVEit Transfer Ad Hoc module. This issue affects MOVEit Transfer: before 2025.1.6 and from 2026.0.0 before 2026.0.4...

CVE-2026-89070

Authentication bypass by capture-replay vulnerability in Progress MOVEit Transfer OIDC module. This issue affects MOVEit Transfer: before 2025.1.6 and from 2026.0.0 before 2026.0.4...

CVE-2026-89071

Improper neutralization of special elements used in an LDAP query 'LDAP injection' vulnerability in Progress MOVEit Transfer LDAP module. This issue affects MOVEit Transfer: before 2025.1.6 and from 2026.0.0 before 2026.0.4...

CVE-2026-89074

Improper handling of unicode encoding vulnerability in Progress MOVEit Transfer. This issue affects MOVEit Transfer: before 2025.1.6 and from 2026.0.0 before 2026.0.4...

CVE-2026-89075

Insecure Storage of Sensitive Information vulnerability in Progress MOVEit Transfer. This issue affects MOVEit Transfer: before 2025.1.6 and from 2026.0.0 before 2026.0.4...

CVE-2026-89072

Incorrect Authorization vulnerability in Progress MOVEit Transfer Client Certificates module. This issue affects MOVEit Transfer: before 2025.1.6 and from 2026.0.0 before 2026.0.4...

CVE-2026-89073

Insufficient Session Expiration vulnerability in Progress MOVEit Transfer. This issue affects MOVEit Transfer: before 2025.1.6 and from 2026.0.0 before 2026.0.4...

CVE-2026-89067

Authentication bypass using an alternate path or channel vulnerability in Progress MOVEit Transfer. This issue affects MOVEit Transfer: before 2025.1.6 and from 2026.0.0 before 2026.0.4...

CVE-2026-87093

Incorrect Permission Assignment for Critical Resource vulnerability in Progress MOVEit Transfer. This issue affects MOVEit Transfer: before 2025.1.6 and from 2026.0.0 before 2026.0.4...

EUVD-2026-101160

Incorrect implementation of authentication algorithm vulnerability in Progress MOVEit Transfer SFTP module. This issue affects MOVEit Transfer: before 2025.1.6 and from 2026.0.0 before 2026.0.4...

CVE-2026-89077 MOVEit Transfer Identity validation flaw in SFTP authentication

Incorrect implementation of authentication algorithm vulnerability in Progress MOVEit Transfer SFTP module. This issue affects MOVEit Transfer: before 2025.1.6 and from 2026.0.0 before 2026.0.4...

CVE-2026-89077

Progress MOVEit Transfer contains an identity validation flaw within the SFTP module due to an incorrect implementation of an authentication algorithm (CWE-303). This vulnerability impacts versions before 2025.1.6 and versions from 2026.0.0 before 2026.0.4 . The flaw can result in high impact con...

EUVD-2026-101158

Improper neutralization of special elements used in an SQL command 'SQL injection' vulnerability in Progress MOVEit Transfer Custom Reports module. This issue affects MOVEit Transfer: before 2025.1.6 and from 2026.0.0 before 2026.0.4...