Loading story…
Progress Software released security updates for multiple vulnerabilities in MOVEit Transfer that could allow security-restriction bypass, cross-site scripting (XSS), and denial-of-service attacks against affected deployments. The issues include CVE-2026-11903, an authenticated, low-complexity network XSS flaw rated CVSS 8.0, and CVE-2026-10699, an unauthenticated, low-complexity network denial-of-service vulnerability rated CVSS 7.5.
Organizations using MOVEit Transfer should test and deploy the available updates promptly. Priority should be given to internet-facing instances, with administrators validating patch installation and monitoring application and network logs for suspicious activity or service-disruption attempts.
See real exploitation activity before you spend the cycle.
1 event from the most recent confirmed update back to the earliest known activity.
Progress Software Corporation released an update for MOVEit Transfer addressing CVE-2026-10698, CVE-2026-10699, and CVE-2026-11903. The flaws could permit security-restriction bypass, cross-site scripting, or denial-of-service attacks.
Vulnerabilities, threat actors, malware, products, organizations, and breaches Mallory has linked to this story.
See real exploitation activity behind this advisory so you can triage it against everything else in the queue.
2 references tracked. Mallory keeps watching after this page renders.
Map indicators from this story to your assets and identify affected systems in minutes.
Every observed campaign, victim, and pivot linked to actors named in this story.
Malware, exploits, and IOCs connected to the activity described here.
YARA, Sigma, and Snort rules deployed to your SIEM as soon as they’re published.
Get matching new stories delivered to your team as they break — not the next morning.
Ask questions about this story and take action on the answers.
Other stories Mallory is tracking that overlap on entities, sources, or topic labels.
Progress Software released security updates for **MOVEit Transfer** to fix four high-severity vulnerabilities affecting versions earlier than `2026.0.3`. The flaws include **authentication bypass**, **security restrictions bypass**, and **information disclosure**, and Italy's national CSIRT urged organizations running vulnerable installations to apply the vendor's updates in line with the official security bulletin. One of the referenced issues, **`CVE-2024-5806`**, is an authentication bypass vulnerability in MOVEit Transfer that was previously highlighted in public technical reporting. The newly issued fixes indicate that multiple serious weaknesses in the managed file transfer platform required remediation, with the primary mitigation being to upgrade affected systems to **`2026.0.3`** or later.
Aug 1, 2026
Progress Software disclosed and patched two vulnerabilities in **MOVEit Automation**, including **`CVE-2026-4670`**, a critical authentication-bypass flaw, and **`CVE-2026-5174`**, a high-severity privilege-escalation issue. The company warned that successful exploitation could let attackers access business data, gain administrative control, and expose sensitive information in the managed file transfer platform. Progress said customers must upgrade to the latest version using the **full installer** and shut down the software during the upgrade process to fully remediate the flaws. External exposure appears significant. Internet scanning cited by Cybersecurity Dive found more than **1,440** internet-connected systems running vulnerable MOVEit Automation versions, including **16** associated with state and local government agencies, while Censys separately issued an advisory tracking **`CVE-2026-4670`**. The disclosure drew added attention because MOVEit products have previously been targeted in high-impact exploitation campaigns, increasing concern that exposed and unpatched systems could become immediate targets.
Jun 29, 2026
Progress Software has disclosed and patched a high-severity vulnerability, tracked as CVE-2025-10932, affecting the AS2 module of MOVEit Transfer. The flaw impacts multiple versions, including MOVEit Transfer 2025.0.2 (17.0.2) and prior, 2024.1.6 (16.1.6) and prior, 2023.1.15 (15.1.15) and prior, as well as 2023.0 and 2024.0 and earlier releases. Security advisories urge users and administrators to review the official updates and apply necessary patches to mitigate the risk associated with this vulnerability. The Canadian Centre for Cyber Security has also issued an alert referencing the same vulnerability, emphasizing the importance of prompt remediation. No evidence of exploitation in the wild has been reported at this time, but the critical nature of the flaw and the widespread use of MOVEit Transfer in enterprise environments make timely patching essential to prevent potential compromise.
Jun 29, 2026