Vulnerabilities

CVSS

7.5 High

Vector

CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H

Risk score

60.0

Published

2026-07-23

Status

Published

Insufficient session expiration vulnerability in Progress MOVEit Transfer. This issue affects MOVEit Transfer: before 2025.1.5, from 2026.0.0 before 2026.0.3.

Weaknesses

CWE-613

Coverage 1

vulnerability

Multiples vulnérabilités dans Progress MOVEit Transfer (31 juillet 2026)

Multiple vulnerabilities have been discovered in Progress MOVEit Transfer, allowing attackers to inject code remotely and bypass security policies. These flaws are impacting versions of the software prior to 2026.0.3 and…

CERT-FR · Jul 31, 2026 High

CVE-2026-10697CVE-2026-15966CVE-2026-15967cvexsssecurity

All articles mentioning it

Advisories and references

• docs.progress.com/bundle/moveit-transfer-release-notes-2026/page/Fix...