Skip to content

CVE record · 1 source

CVE-2026-89071

CVSS 7.5

Improper neutralization of special elements used in an LDAP query ('LDAP injection') vulnerability in Progress MOVEit Transfer (LDAP module).

Vendor: Progress Software
Product: MOVEit / WhatsUp Gold / Telerik / Kemp
CVSS: 7.5
EPSS: 0.005 (p44)
Exposure class: File transfer

Coverage

1

Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.

22

CVE NVD 17d ago

Improper neutralization of special elements used in an LDAP query ('LDAP injection') vulnerability in Progress MOVEit Transfer (LDAP module).

Improper neutralization of special elements used in an LDAP query ('LDAP injection') vulnerability in Progress MOVEit Transfer (LDAP module). This issue affects MOVEit Transfer: before 2025.1.6 and from 2026.0.0 before 2026.0.4.

CVSS 7.5 CVE-2026-89071 Progress Software