Skip to content

CVE record · 1 source

CVE-2026-89067

CVSS 8.8

Authentication bypass using an alternate path or channel vulnerability in Progress MOVEit Transfer.

Vendor: Progress Software
Product: MOVEit / WhatsUp Gold / Telerik / Kemp
CVSS: 8.8
EPSS: 0.005 (p45)
Exposure class: File transfer

Coverage

1

Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.

22

CVE NVD 17d ago

Authentication bypass using an alternate path or channel vulnerability in Progress MOVEit Transfer.

Authentication bypass using an alternate path or channel vulnerability in Progress MOVEit Transfer. This issue affects MOVEit Transfer: before 2025.1.6 and from 2026.0.0 before 2026.0.4.

CVSS 8.8 CVE-2026-89067 Progress Software