CVE-2026-10698highCWE-943

CVE-2026-10698: falha de alta gravidade em Progress MOVEit Transfer

Table scope bypass vulnerability in custom reports

Publicada em · Atualizada em

Seguir esta CVE+ Monitorar MOVEit Transfer

Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.

21Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Trackcvss 7.2epss 0.6%
Improper Neutralization of Special Elements in Data Query Logic vulnerability in Progress MOVEit Transfer (Custom Reports modules). This issue affects MOVEit Transfer: from 2025.0.0 before 2025.0.8, from 2025.1.0 before 2025.1.4, from 2026.0.0 before 2026.0.1.
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Produtos afetados
Progress · MOVEit Transfer
CVEs relacionadas — Progress MOVEit Transfer

No mesmo produto, das mais perigosas para as menos.

CVE-2024-5806CRITICALMOVEit Transfer Authentication Bypass VulnerabilityEPSS 81.5%CVE-2024-6576HIGHMOVEit Transfer Privilege Escalation VulnerabilityEPSS 0.6%CVE-2026-8650MEDIUMAuthenticated Path Traversal allows MOVEit admins to view arbitrary system filesEPSS 0.6%CVE-2026-10697HIGHMFA Bypass in MOVEit TransferEPSS 0.6%CVE-2026-8801LOWFile Extension Restriction Bypass in MOVEit TransferEPSS 0.5%CVE-2026-89068HIGHMOVEit Transfer Authentication bypass in LDAP sign-onEPSS 0.5%