PT-2026-114324 · Progress · Moveit Transfer

Mateusz Mieczkowski

·

CVE-2026-89072

·

Published

2026-10-14

·

Updated

2026-10-18

CVSS v3.1

7.5

High

VectorAV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions MOVEit Transfer versions prior to 2025.1.6 MOVEit Transfer versions 2026.0.0 through 2026.0.3
Description An incorrect authorization issue exists within the Client Certificates module of Progress MOVEit Transfer.
Recommendations Update to version 2025.1.6 or later. Update to version 2026.0.4 or later.

Fix

Incorrect Authorization

Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com

Weakness Enumeration

CWE-863

Related Identifiers

CVE-2026-89072

Affected Products

Moveit Transfer