CVE-2026-4670

MOVEit Automation (Progress Software) is affected by two CVEs. CVE-2026-4670 is an authentication bypass due to a primary weakness impacting MOVEit Automation releases older than 2025.0.9, 2024.1.x, and 2024.0.x series; CVSSv3.1 is 9.8 (Network, required none, user interaction none, confidentiali...

CVE-2026-5174

CVE-2026-5174 describes an improper input validation vulnerability in Progress Software MOVEit Automation that allows privilege escalation. Affected: MOVEit Automation versions 2025.1.0 before 2025.1.5, 2025.0.0 before 2025.0.9, 2024.0.0 before 2024.1.8, and versions prior to 2024.0.0. Root cause...