Skip to content
OpenAdvisories
Critical · 9.8 CVE-2026-4670 EUVD-2026-26389GHSA-2cqj-hxr6-hc5p

Improper Authentication vulnerability in Progress MOVEit Automation

Published Apr 30, 2026 · Updated May 1, 2026 · Assigned by ProgressSoftware

Description

Authentication bypass by primary weakness vulnerability in Progress Software MOVEit Automation allows Authentication Bypass.

This issue affects MOVEit Automation: from 2025.0.0 before 2025.0.9, from 2024.0.0 before 2024.1.8, versions prior to 2024.0.0.

Affected products

VendorProductAffectedFixed
Progress Software MOVEit Automation 2025.0.0 – < 2025.0.9, 2024.0.0 – < 2024.1.8, < 2024.0.0 2025.0.9

Advisories 2

References