Product by Progress Software

    Moveit Transfer

    20 known vulnerabilities in Moveit Transfer (Progress Software), 0 of them actively exploited (CISA KEV).

    Key figures

    20

    Vulnerabilities

    0

    Actively exploited (KEV)

    0

    Used by ransomware

    5

    Critical

    Vulnerabilities

    Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.

    Vulnerabilities in Moveit Transfer (Progress Software)
    HighCVE-2026-89067

    MOVEit Transfer Secure Messaging Authentication Bypass

    also in 1 other product

    		8.8
    CriticalCVE-2026-10697

    MFA Bypass in MOVEit Transfer

    also in 1 other product

    		9.8
    CriticalCVE-2026-89068

    MOVEit Transfer Authentication bypass in LDAP sign-on

    also in 1 other product

    		8.1
    HighCVE-2026-89071

    MOVEit Transfer LDAP injection in certificate-based authentication

    also in 1 other product

    		7.5
    HighCVE-2026-89069

    MOVEit Transfer Stored XSS Vulnerability in Ad Hoc Packages

    also in 1 other product

    		8.0
    HighCVE-2026-89076

    MOVEit Transfer SQL injection in custom reporting

    also in 1 other product

    		7.2
    HighCVE-2026-89074

    MOVEit Transfer Email MFA Bypass

    also in 1 other product

    		7.5
    HighCVE-2026-89077

    MOVEit Transfer Identity validation flaw in SFTP authentication

    also in 1 other product

    		7.5
    HighCVE-2026-89070

    MOVEit Transfer OIDC Authentication Replay Vulnerability

    also in 1 other product

    		7.5
    CriticalCVE-2026-15966

    Improper CORS handling in MOVEit Transfer

    also in 1 other product

    		9.8
    CriticalCVE-2026-15967

    MOVEit Transfer refresh-token processing does not enforce updated account restrictions

    also in 1 other product

    		9.8
    CriticalCVE-2026-89073

    MOVEit Transfer Access restriction bypass in OAuth authentication

    also in 1 other product

    		7.5
    HighCVE-2026-10698

    Table scope bypass vulnerability in custom reports

    also in 2 other products

    		7.2
    HighCVE-2026-87093

    MOVEit Transfer Service Directory Writable by Local Users Enables Local Privilege Escalation

    also in 1 other product

    		8.8
    HighCVE-2026-10699

    Memory leak in SFTP service can result in a denial of service in MOVEit Transfer

    also in 2 other products

    		7.5
    HighCVE-2026-89072

    MOVEit Transfer Authorization Flaw in Certificate Management

    also in 1 other product

    		7.5
    HighCVE-2026-89075

    MOVEit Transfer Local Disclosure of Session Information Vulnerability

    also in 1 other product

    		7.3
    HighCVE-2026-11903

    Stored XSS in MOVEit Transfer Ad Hoc module

    also in 2 other products

    		5.4
    HighCVE-2026-15968

    Stored XSS vulnerability in MOVEit Transfer

    also in 1 other product

    		5.4
    MediumCVE-2024-2291

    MOVEit Transfer Logging Bypass Vulnerability

    also in 1 other product

    		4.3

    All products by Progress Software