Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

12 records

Advisory: Progress MOVEit Transfer — community.progress.com/s/article/MOVEit-Transfer-Critical-S… Clear all filters
TI-2026-74047 CVE-2026-89076 · GHSA-xcw4-ch93-wcpr

SQL injection in MOVEit Transfer custom reporting

Priority MEDIUM 41

Improper neutralization of special elements used in an SQL command ('SQL injection') vulnerability in Progress MOVEit Transfer (Custom Reports module).

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00519 Published 2026-10-14 Fixed in 2025.1.6, 2026.0.4 CWE-89
TI-2026-74042 CVE-2026-89071 · GHSA-f2xf-w3f6-6rc6

LDAP injection in Progress MOVEit Transfer certificate authentication

Priority MEDIUM 41

Improper neutralization of special elements used in an LDAP query ('LDAP injection') vulnerability in Progress MOVEit Transfer (LDAP module).

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00521 Published 2026-10-14 Fixed in 2025.1.6, 2026.0.4 CWE-90
TI-2026-74040 CVE-2026-89069 · GHSA-gwhj-7mgx-69jf

Stored cross-site scripting in MOVEit Transfer Ad Hoc packages

Priority LOW 37

Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in Progress MOVEit Transfer (Ad Hoc module).

CVSS 3.1HIGH 8.0 Network Low privileges User interaction EPSS 0.00438 Published 2026-10-14 Fixed in 2025.1.6, 2026.0.4 CWE-79