CVE-2026-89072 MOVEit Transfer Authorization Flaw in Certificate Management

Incorrect Authorization vulnerability in Progress MOVEit Transfer Client Certificates module. This issue affects MOVEit Transfer: before 2025.1.6 and from 2026.0.0 before 2026.0.4...

CVE-2026-89071 MOVEit Transfer LDAP injection in certificate-based authentication

Improper neutralization of special elements used in an LDAP query 'LDAP injection' vulnerability in Progress MOVEit Transfer LDAP module. This issue affects MOVEit Transfer: before 2025.1.6 and from 2026.0.0 before 2026.0.4...

EUVD-2026-101151

Improper neutralization of special elements used in an LDAP query 'LDAP injection' vulnerability in Progress MOVEit Transfer LDAP module. This issue affects MOVEit Transfer: before 2025.1.6 and from 2026.0.0 before 2026.0.4...

CVE-2026-89071

Progress MOVEit Transfer is affected by an LDAP injection vulnerability within its LDAP module during certificate-based authentication. The root cause is the improper neutralization of special elements used in an LDAP query. This issue impacts versions before 2025.1.6 and versions from 2026.0.0 b...

CVE-2026-89071 MOVEit Transfer LDAP injection in certificate-based authentication

Improper neutralization of special elements used in an LDAP query 'LDAP injection' vulnerability in Progress MOVEit Transfer LDAP module. This issue affects MOVEit Transfer: before 2025.1.6 and from 2026.0.0 before 2026.0.4...

EUVD-2026-101150

Authentication bypass by capture-replay vulnerability in Progress MOVEit Transfer OIDC module. This issue affects MOVEit Transfer: before 2025.1.6 and from 2026.0.0 before 2026.0.4...

CVE-2026-89070

Progress MOVEit Transfer is affected by an authentication bypass vulnerability within the OIDC module caused by a capture-replay flaw (CWE-294). This vulnerability impacts versions before 2025.1.6 and versions from 2026.0.0 before 2026.0.4 . The security bulletin indicates a High severity level, ...

CVE-2026-89070 MOVEit Transfer OIDC Authentication Replay Vulnerability

Authentication bypass by capture-replay vulnerability in Progress MOVEit Transfer OIDC module. This issue affects MOVEit Transfer: before 2025.1.6 and from 2026.0.0 before 2026.0.4...

CVE-2026-89069 MOVEit Transfer Stored XSS Vulnerability in Ad Hoc Packages

Improper neutralization of input during web page generation 'cross-site scripting' vulnerability in Progress MOVEit Transfer Ad Hoc module. This issue affects MOVEit Transfer: before 2025.1.6 and from 2026.0.0 before 2026.0.4...

EUVD-2026-101149

Improper neutralization of input during web page generation 'cross-site scripting' vulnerability in Progress MOVEit Transfer Ad Hoc module. This issue affects MOVEit Transfer: before 2025.1.6 and from 2026.0.0 before 2026.0.4...

CVE-2026-89069

Progress MOVEit Transfer contains a Stored Cross-Site Scripting (XSS) vulnerability within the Ad Hoc module caused by improper neutralization of input during web page generation. This issue affects versions before 2025.1.6 and versions from 2026.0.0 before 2026.0.4 . The vulnerability carries a ...

EUVD-2026-101148

Missing critical step in authentication vulnerability in Progress MOVEit Transfer LDAP module. This issue affects MOVEit Transfer: before 2025.1.6 and from 2026.0.0 before 2026.0.4...

CVE-2026-89068 MOVEit Transfer Authentication bypass in LDAP sign-on

Missing critical step in authentication vulnerability in Progress MOVEit Transfer LDAP module. This issue affects MOVEit Transfer: before 2025.1.6 and from 2026.0.0 before 2026.0.4...

CVE-2026-89068 MOVEit Transfer Authentication bypass in LDAP sign-on

Missing critical step in authentication vulnerability in Progress MOVEit Transfer LDAP module. This issue affects MOVEit Transfer: before 2025.1.6 and from 2026.0.0 before 2026.0.4...

CVE-2026-89068

A missing critical step in authentication within the LDAP module of Progress MOVEit Transfer allows for an authentication bypass. This vulnerability affects MOVEit Transfer versions prior to 2025.1.6 and versions 2026.0.0 through 2026.0.3 . Approximately 1,700 instances have been identified globa...

CVE-2026-89067 MOVEit Transfer Secure Messaging Authentication Bypass

Authentication bypass using an alternate path or channel vulnerability in Progress MOVEit Transfer. This issue affects MOVEit Transfer: before 2025.1.6 and from 2026.0.0 before 2026.0.4...

EUVD-2026-101146

Authentication bypass using an alternate path or channel vulnerability in Progress MOVEit Transfer. This issue affects MOVEit Transfer: before 2025.1.6 and from 2026.0.0 before 2026.0.4...

CVE-2026-89067

Progress MOVEit Transfer is affected by an authentication bypass vulnerability (CWE-288) involving an alternate path or channel. The flaw impacts versions prior to 2025.1.6 and versions from 2026.0.0 up to 2026.0.4 . Exploitation details are not provided in the documents. Remediation information ...

CVE-2026-87093 MOVEit Transfer Service Directory Writable by Local Users Enables Local Privilege Escalation

Incorrect Permission Assignment for Critical Resource vulnerability in Progress MOVEit Transfer. This issue affects MOVEit Transfer: before 2025.1.6 and from 2026.0.0 before 2026.0.4...

CVE-2026-87093

Progress MOVEit Transfer is affected by an Incorrect Permission Assignment for Critical Resource vulnerability (CWE-732). The issue stems from a MOVEit Transfer service directory being writable by local users, which enables Local Privilege Escalation . Affected versions include those before 2025....