16378 matches found
CVE-2026-87093
Incorrect Permission Assignment for Critical Resource vulnerability in Progress MOVEit Transfer. This issue affects MOVEit Transfer: before 2025.1.6 and from 2026.0.0 before 2026.0.4...
CVE-2026-89067
Authentication bypass using an alternate path or channel vulnerability in Progress MOVEit Transfer. This issue affects MOVEit Transfer: before 2025.1.6 and from 2026.0.0 before 2026.0.4...
CVE-2026-73814
Gitea's collaboration access-mode endpoint accepts the Owner access mode from an authenticated repository collaborator with Admin access. The collaborator can promote their effective permissions from Admin to Owner and then perform owner-only operations, including transferring the repository to...
CVE-2026-89077
Progress MOVEit Transfer contains an identity validation flaw within the SFTP module due to an incorrect implementation of an authentication algorithm (CWE-303). This vulnerability impacts versions before 2025.1.6 and versions from 2026.0.0 before 2026.0.4 . The flaw can result in high impact con...
CVE-2026-89077 MOVEit Transfer Identity validation flaw in SFTP authentication
Incorrect implementation of authentication algorithm vulnerability in Progress MOVEit Transfer SFTP module. This issue affects MOVEit Transfer: before 2025.1.6 and from 2026.0.0 before 2026.0.4...
EUVD-2026-101160
Incorrect implementation of authentication algorithm vulnerability in Progress MOVEit Transfer SFTP module. This issue affects MOVEit Transfer: before 2025.1.6 and from 2026.0.0 before 2026.0.4...
CVE-2026-89076 MOVEit Transfer SQL injection in custom reporting
Improper neutralization of special elements used in an SQL command 'SQL injection' vulnerability in Progress MOVEit Transfer Custom Reports module. This issue affects MOVEit Transfer: before 2025.1.6 and from 2026.0.0 before 2026.0.4...
EUVD-2026-101158
Improper neutralization of special elements used in an SQL command 'SQL injection' vulnerability in Progress MOVEit Transfer Custom Reports module. This issue affects MOVEit Transfer: before 2025.1.6 and from 2026.0.0 before 2026.0.4...
CVE-2026-89076
Progress MOVEit Transfer is impacted by an SQL injection vulnerability (CWE-89) within the Custom Reports module . The flaw stems from the improper neutralization of special elements used in SQL commands. This issue affects versions before 2025.1.6 and versions from 2026.0.0 before 2026.0.4 . The...
EUVD-2026-101157
Insecure Storage of Sensitive Information vulnerability in Progress MOVEit Transfer. This issue affects MOVEit Transfer: before 2025.1.6 and from 2026.0.0 before 2026.0.4...
CVE-2026-89075 MOVEit Transfer Local Disclosure of Session Information Vulnerability
Insecure Storage of Sensitive Information vulnerability in Progress MOVEit Transfer. This issue affects MOVEit Transfer: before 2025.1.6 and from 2026.0.0 before 2026.0.4...
CVE-2026-89075
Progress MOVEit Transfer is affected by an Insecure Storage of Sensitive Information vulnerability (CWE-922). The issue specifically impacts versions before 2025.1.6 and versions from 2026.0.0 before 2026.0.4 . This vulnerability allows for the local disclosure of session information . Exploitati...
EUVD-2026-101156
Improper handling of unicode encoding vulnerability in Progress MOVEit Transfer. This issue affects MOVEit Transfer: before 2025.1.6 and from 2026.0.0 before 2026.0.4...
CVE-2026-89074 MOVEit Transfer Email MFA Bypass
Improper handling of unicode encoding vulnerability in Progress MOVEit Transfer. This issue affects MOVEit Transfer: before 2025.1.6 and from 2026.0.0 before 2026.0.4...
CVE-2026-89074
Progress MOVEit Transfer is vulnerable to a security issue caused by improper handling of unicode encoding . This vulnerability affects versions prior to 2025.1.6 and versions from 2026.0.0 up to (but before) 2026.0.4 . The impact includes potential bypass of email MFA. No specific exploit detail...
CVE-2026-89073
Progress MOVEit Transfer is impacted by an Insufficient Session Expiration vulnerability (CWE-613 ). This flaw affects versions prior to 2025.1.6 and versions from 2026.0.0 to before 2026.0.4 . The vulnerability could allow unauthorized session persistence, potentially leading to high impact on c...
CVE-2026-89073 MOVEit Transfer Access restriction bypass in OAuth authentication
Insufficient Session Expiration vulnerability in Progress MOVEit Transfer. This issue affects MOVEit Transfer: before 2025.1.6 and from 2026.0.0 before 2026.0.4...
EUVD-2026-101155
Insufficient Session Expiration vulnerability in Progress MOVEit Transfer. This issue affects MOVEit Transfer: before 2025.1.6 and from 2026.0.0 before 2026.0.4...
CVE-2026-89072
Progress MOVEit Transfer contains an incorrect authorization vulnerability (CWE-863) within the Client Certificates module . This flaw impacts versions prior to 2025.1.6 and versions from 2026.0.0 up to, but not including, 2026.0.4 . The vulnerability has a CVSS 3.1 score of 7.5 (HIGH) , indicati...