Vulnerabilities

CVSS

9.8 Critical

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Risk score

78.4

Published

2026-07-23

Status

Analyzed

Permissive cross-domain security policy with untrusted domains vulnerability in Progress MOVEit Transfer. This issue affects MOVEit Transfer: before 2025.1.5, from 2026.0.0 before 2026.0.3.

Weaknesses

CWE-942

Coverage 1

vulnerability

Multiples vulnérabilités dans Progress MOVEit Transfer (31 juillet 2026)

Multiple vulnerabilities have been discovered in Progress MOVEit Transfer, allowing attackers to inject code remotely and bypass security policies. These flaws are impacting versions of the software prior to 2026.0.3 and…

CERT-FR · Jul 31, 2026 High

CVE-2026-10697CVE-2026-15966CVE-2026-15967cvexsssecurity

All articles mentioning it

Advisories and references

• docs.progress.com/bundle/moveit-transfer-release-notes-2026/page/Fix...