Skip to content
OpenAdvisories
High WID-SEC-2026-2262 3 CVEs

Progress Software MOVEit: Mehrere Schwachstellen

Published Jul 8, 2026 · Updated Jul 8, 2026 · de-DE

Vendor: Progress Software Product: MOVEit Platform: Windows

Summary

Ein Angreifer kann mehrere Schwachstellen in Progress Software MOVEit ausnutzen, um Sicherheitsvorkehrungen zu umgehen, um einen Denial of Service Angriff durchzuführen, und um einen Cross-Site Scripting Angriff durchzuführen.

Product

Progress MOVEit ist eine sichere Managed File Transfer (MFT)-Software, die Transparenz und Kontrolle über die Dateiübertragungsaktivitäten bietet.

Vulnerabilities 3

  • High 8.0
    CVE-2026-11903

    Stored XSS in MOVEit Transfer Ad Hoc module

    Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in Progress MOVEit Transfer (Ad Hoc module). This issue affects MOVEit Transfer: from 2026.0.0 before 2026.0.1, from 2025.1.0 before 2025.1.4, from 2025.0.0 bef…

    Progress Software MOVEit Transfer
  • High 7.5
    CVE-2026-10699

    Memory leak in SFTP service can result in a denial of service in MOVEit Transfer

    Missing release of memory after effective lifetime vulnerability in Progress MOVEit Transfer (Custom Reports modules). This issue affects MOVEit Transfer: from 2025.0.0 before 2025.0.8, from 2025.1.0 before 2025.1.4, from 2026.0.0 before 2026.0.1.

    Progress Software MOVEit Transfer
  • High 7.2
    CVE-2026-10698

    Table scope bypass vulnerability in custom reports

    Improper Neutralization of Special Elements in Data Query Logic vulnerability in Progress MOVEit Transfer (Custom Reports modules). This issue affects MOVEit Transfer: from 2025.0.0 before 2025.0.8, from 2025.1.0 before 2025.1.4, from 2026.0.0 before 2026.0.1.

    Progress Software MOVEit Transfer

Revision history

  1. #1

    Initiale Fassung

References