Skip to content
OpenAdvisories
High · 7.7 CVE-2026-5174 EUVD-2026-26390GHSA-9pjg-ppfq-29g7

Improper Access Control Vulnerability in Progress MOVEit Automation

Published Apr 30, 2026 · Updated May 1, 2026 · Assigned by ProgressSoftware

Description

Improper input validation vulnerability in Progress Software MOVEit Automation allows Privilege Escalation.

This issue affects MOVEit Automation: from 2025.1.0 before 2025.1.5, from 2025.0.0 before 2025.0.9, from 2024.0.0 before 2024.1.8, versions prior to 2024.0.0.

Affected products

VendorProductAffectedFixed
Progress Software MOVEit Automation 2025.1.0 – < 2025.1.5, 2025.0.0 – < 2025.0.9, 2024.0.0 – < 2024.1.8, < 2024.0.0 2025.1.5

Advisories 2

References