Loading vulnerability…
Authentication Bypass in Progress MOVEit Transfer
CVE-2026-10697 is an improper authentication vulnerability in Progress MOVEit Transfer affecting versions earlier than 2025.1.5 and versions from 2026.0.0 up to, but not including, 2026.0.3. An adjacent attacker could bypass authentication mechanisms and obtain unauthorized access to the affected system. The specific vulnerable function and authentication bypass mechanism are not disclosed.
What it means and what to do now: patch path, interim mitigations, and the assume-compromise checklist.
What an attacker gets, and what they’ve been doing with it.
Successful exploitation permits authentication-control bypass and unauthorized access to the affected MOVEit Transfer system. The extent of accessible data and functionality, and the privileges obtained, are not specified.
If you can’t patch tonight, do this now.
If immediate patching is not possible, reduce exposure of MOVEit Transfer to adjacent or untrusted network segments, restrict access to trusted hosts and administrative boundaries, and monitor authentication activity for anomalous access attempts. These measures are compensating controls only; the recommended corrective action is to upgrade to a fixed version.
Patch, then assume compromise.
Upgrade MOVEit Transfer to version 2025.1.5 or later in the 2025 branch, or version 2026.0.3 or later in the 2026 branch. Deploy the applicable security update promptly after testing.
No public exploits tracked yet. Mallory keeps watching.
Products and vendors Mallory has correlated with this vulnerability. Open in Mallory to drill down to specific CPE configurations and version ranges.
7 sources tracked across advisories, community write-ups, and news. New activity surfaces here as Mallory finds it.