CVE record · 1 source
CVE-2026-89070
CVSS 7.5Authentication bypass by capture-replay vulnerability in Progress MOVEit Transfer (OIDC module).
- Vendor
- Progress Software
- Product
- MOVEit / WhatsUp Gold / Telerik / Kemp
- CVSS
- 7.5
- EPSS
- 0.004 (p38)
- Exposure class
- File transfer
Coverage
1Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.
-
Authentication bypass by capture-replay vulnerability in Progress MOVEit Transfer (OIDC module).
Authentication bypass by capture-replay vulnerability in Progress MOVEit Transfer (OIDC module). This issue affects MOVEit Transfer: before 2025.1.6 and from 2026.0.0 before 2026.0.4.