16378 matches found
CVE-2026-89074: Improper Handling of Unicode Encoding
Improper handling of unicode encoding vulnerability in Progress MOVEit Transfer. This issue affects MOVEit Transfer: before 2025.1.6 and from 2026.0.0 before 2026.0.4...
PT-2026-114326
Name of the Vulnerable Software and Affected Versions MOVEit Transfer versions prior to 2025.1.6 MOVEit Transfer versions 2026.0.0 through 2026.0.3 Description Progress MOVEit Transfer contains an issue involving the improper handling of unicode encoding, which is a character encoding standard us...
CVE-2026-89073: Insufficient Session Expiration
Insufficient Session Expiration vulnerability in Progress MOVEit Transfer. This issue affects MOVEit Transfer: before 2025.1.6 and from 2026.0.0 before 2026.0.4...
CVE-2026-89069: Improper Neutralization of Input During Web Page Generation
Improper neutralization of input during web page generation 'cross-site scripting' vulnerability in Progress MOVEit Transfer Ad Hoc module. This issue affects MOVEit Transfer: before 2025.1.6 and from 2026.0.0 before 2026.0.4...
PT-2026-114321
Name of the Vulnerable Software and Affected Versions MOVEit Transfer versions prior to 2025.1.6 MOVEit Transfer versions 2026.0.0 through 2026.0.3 Description Progress MOVEit Transfer Ad Hoc module contains a stored cross-site scripting issue, which occurs when input is not properly neutralized...
PT-2026-114320
Name of the Vulnerable Software and Affected Versions MOVEit Transfer versions prior to 2025.1.6 MOVEit Transfer versions 2026.0.0 through 2026.0.3 Description An authentication bypass exists in the LDAP module due to a missing critical step in the authentication process. Approximately 1,700...
CVE-2026-89067: Authentication Bypass Using an Alternate Path or Channel
Authentication bypass using an alternate path or channel vulnerability in Progress MOVEit Transfer. This issue affects MOVEit Transfer: before 2025.1.6 and from 2026.0.0 before 2026.0.4...
PT-2026-114319
Name of the Vulnerable Software and Affected Versions MOVEit Transfer versions prior to 2025.1.6 MOVEit Transfer versions 2026.0.0 through 2026.0.3 Description An authentication bypass exists in Progress MOVEit Transfer that allows access using an alternate path or channel. Recommendations Update...
PT-2026-114327
Name of the Vulnerable Software and Affected Versions MOVEit Transfer versions prior to 2025.1.6 MOVEit Transfer versions 2026.0.0 through 2026.0.3 Description Progress MOVEit Transfer contains an issue regarding the insecure storage of sensitive information. Recommendations Update to version...
CVE-2026-87093: Incorrect Permission Assignment for Critical Resource
Incorrect Permission Assignment for Critical Resource vulnerability in Progress MOVEit Transfer. This issue affects MOVEit Transfer: before 2025.1.6 and from 2026.0.0 before 2026.0.4...
PT-2026-114322
Name of the Vulnerable Software and Affected Versions MOVEit Transfer versions prior to 2025.1.6 MOVEit Transfer versions 2026.0.0 through 2026.0.3 Description An authentication bypass exists in the OIDC module due to a capture-replay flaw. Approximately 1,700 instances have been identified...
PT-2026-114328
Name of the Vulnerable Software and Affected Versions MOVEit Transfer versions prior to 2025.1.6 MOVEit Transfer versions 2026.0.0 through 2026.0.3 Description An SQL injection issue exists within the Custom Reports module. This occurs due to the improper neutralization of special elements used i...
PT-2026-113749
Name of the Vulnerable Software and Affected Versions curl affected versions not specified Description A malicious FTP, IMAP, POP3, or SMTP server can exploit libcurl by permanently omitting the final control-response line. This action allows the server to completely bypass the configured transfe...
CVE-2026-88173
Use after free in Windows Background Intelligent Transfer Service BITS allows an unauthorized attacker to execute code over a network...
CVE-2026-88159
Use after free in Windows Background Intelligent Transfer Service BITS allows an unauthorized attacker to execute code over a network...
CVE-2026-88152
Use after free in Windows Background Intelligent Transfer Service BITS allows an authorized attacker to elevate privileges locally...
CVE-2026-88146
Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Background Intelligent Transfer Service BITS allows an authorized attacker to elevate privileges locally...
CVE-2026-88142
Use after free in Windows Background Intelligent Transfer Service BITS allows an unauthorized attacker to execute code over a network...