Critical Authentication Bypass in MOVEit Automation Triggers Urgent Patching

Progress Software disclosed and patched two vulnerabilities in MOVEit Automation, including CVE-2026-4670, a critical authentication-bypass flaw, and CVE-2026-5174, a high-severity privilege-escalation issue. The company warned that successful exploitation could let attackers access business data, gain administrative control, and expose sensitive information in the managed file transfer platform. Progress said customers must upgrade to the latest version using the full installer and shut down the software during the upgrade process to fully remediate the flaws.

External exposure appears significant. Internet scanning cited by Cybersecurity Dive found more than 1,440 internet-connected systems running vulnerable MOVEit Automation versions, including 16 associated with state and local government agencies, while Censys separately issued an advisory tracking CVE-2026-4670. The disclosure drew added attention because MOVEit products have previously been targeted in high-impact exploitation campaigns, increasing concern that exposed and unpatched systems could become immediate targets.