Skip to content

CVE record · 1 source

CVE-2026-89076

CVSS 7.2

Improper neutralization of special elements used in an SQL command ('SQL injection') vulnerability in Progress MOVEit Transfer (Custom Reports…

Vendor: Progress Software
Product: MOVEit / WhatsUp Gold / Telerik / Kemp
CVSS: 7.2
EPSS: 0.005 (p44)
Exposure class: File transfer

Coverage

1

Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.

22

CVE NVD 17d ago

Improper neutralization of special elements used in an SQL command ('SQL injection') vulnerability in Progress MOVEit Transfer (Custom Reports…

Improper neutralization of special elements used in an SQL command ('SQL injection') vulnerability in Progress MOVEit Transfer (Custom Reports module). This issue affects MOVEit Transfer: before 2025.1.6 and from 2026.0.0 before…

CVSS 7.2 CVE-2026-89076 Progress Software