Progress vulnerabilities

CVEs per yearBy the year they were published

1. 202410
2. 202512
3. 202634

Newest CVEs

• CVE-2026-89077

  MOVEit Transfer Identity validation flaw in SFTP authentication

  Progress · MOVEit Transfer

  High7.5
• CVE-2026-89076

  MOVEit Transfer SQL injection in custom reporting

  Progress · MOVEit Transfer

  High7.2
• CVE-2026-89075

  MOVEit Transfer Local Disclosure of Session Information Vulnerability

  Progress · MOVEit Transfer

  High7.3
• CVE-2026-89074

  MOVEit Transfer Email MFA Bypass

  Progress · MOVEit Transfer

  High7.5
• CVE-2026-89073

  MOVEit Transfer Access restriction bypass in OAuth authentication

  Progress · MOVEit Transfer

  High7.5
• CVE-2026-89072

  MOVEit Transfer Authorization Flaw in Certificate Management

  Progress · MOVEit Transfer

  High7.5
• CVE-2026-89071

  MOVEit Transfer LDAP injection in certificate-based authentication

  Progress · MOVEit Transfer

  High7.5
• CVE-2026-89070

  MOVEit Transfer OIDC Authentication Replay Vulnerability

  Progress · MOVEit Transfer

  High7.5
• CVE-2026-89069

  MOVEit Transfer Stored XSS Vulnerability in Ad Hoc Packages

  Progress · MOVEit Transfer

  High8.0
• CVE-2026-89068

  MOVEit Transfer Authentication bypass in LDAP sign-on

  Progress · MOVEit Transfer

  High8.1