Skip to content

CVE record · 1 source

CVE-2026-89073

CVSS 7.5

Insufficient Session Expiration vulnerability in Progress MOVEit Transfer.

Vendor: Progress Software
Product: MOVEit / WhatsUp Gold / Telerik / Kemp
CVSS: 7.5
EPSS: 0.004 (p34)
Exposure class: File transfer

Coverage

1

Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.

22

CVE NVD 17d ago

Insufficient Session Expiration vulnerability in Progress MOVEit Transfer.

Insufficient Session Expiration vulnerability in Progress MOVEit Transfer. This issue affects MOVEit Transfer: before 2025.1.6 and from 2026.0.0 before 2026.0.4.

CVSS 7.5 CVE-2026-89073 Progress Software