Skip to content
OpenAdvisories
High · 7.5 CVE-2026-15966 EUVD-2026-48419GHSA-9rcg-65vx-h53x

Improper CORS handling in MOVEit Transfer

Published Jul 23, 2026 · Updated Jul 25, 2026 · Assigned by ProgressSoftware

Vendor: Progress Software Product: MOVEit Transfer

Description

Permissive cross-domain security policy with untrusted domains vulnerability in Progress MOVEit Transfer.

This issue affects MOVEit Transfer: before 2025.1.5, from 2026.0.0 before 2026.0.3.

Affected products

VendorProductAffectedFixed
Progress MOVEit Transfer < 2025.1.5, 2026.0.0 – < 2026.0.3 2025.1.5

Advisories 1

References