TI-2026-07736 CVE-2026-8800 · GHSA-4844-25m4-j7hc
Cross-Org External Token Metadata accessible to AuditUser role
Priority LOW 38
Incorrect Authorization vulnerability in Progress MOVEit Transfer (Audit User module).
Vulnerabilities
4 records
TI-2026-07600 CVE-2026-8651 · GHSA-rwjf-g383-jc9c
IPv6 Loopback Spoof via Trusted Host Header Bypasses Origin Check in MOVEit Transfer
Priority LOW 33
Limited authentication bypass by spoofing vulnerability in Progress MOVEit Transfer (HTTPS module).
TI-2026-07599 CVE-2026-8650 · GHSA-qp89-5wp8-rj83
Authenticated Path Traversal allows MOVEit admins to view arbitrary system files
Priority LOW 34
Relative path traversal vulnerability in Progress MOVEit Transfer (Admin Settings module).
TI-2026-07598 CVE-2026-8649 · GHSA-jh92-gc65-pg86
Institution scope bypass vulnerability in custom reports
Priority MEDIUM 43
Improper Neutralization of Special Elements in Data Query Logic vulnerability in Progress MOVEit Transfer (Custom Reports modules).