Skip to content
OpenAdvisories
Medium · 6.5 CVE-2026-8487 EUVD-2026-31120GHSA-58jp-6f6m-4v4f

Incorrect default permissions vulnerability in Progress Software MOVEit Automation

Published May 20, 2026 · Updated May 20, 2026 · Assigned by ProgressSoftware

Description

Incorrect default permissions vulnerability in Progress Software MOVEit Automation allows Retrieve Embedded Sensitive Data.

This issue affects MOVEit Automation: before 2025.0.11, from 2025.1.0 before 2025.1.7.

Affected products

VendorProductAffectedFixed
Progress Software MOVEit Automation < 2025.0.11, 2025.1.0 – < 2025.1.7 2025.0.11

Advisories 1

References