CVE-2026-5174highCWE-20

CVE-2026-5174: falha de alta gravidade em Progress Software MOVEit Automation

Improper Access Control Vulnerability in Progress MOVEit Automation

Publicada em · Atualizada em

Seguir esta CVE+ Monitorar MOVEit Automation

Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.

21Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Trackcvss 7.7epss 3.3%
Improper input validation vulnerability in Progress Software MOVEit Automation allows Privilege Escalation. This issue affects MOVEit Automation: from 2025.1.0 before 2025.1.5, from 2025.0.0 before 2025.0.9, from 2024.0.0 before 2024.1.8, versions prior to 2024.0.0.
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H
Produtos afetados
Progress Software · MOVEit Automation
CVEs relacionadas — Progress Software MOVEit Automation

No mesmo produto, das mais perigosas para as menos.

CVE-2026-4670CRITICALImproper Authentication vulnerability in Progress MOVEit AutomationEPSS 5.0%CVE-2026-8486MEDIUMAllocation of resources without limits or throttling vulnerability in Progress Software MOVEit AutomationEPSS 0.4%CVE-2026-8488MEDIUMAllocation of resources without limits or throttling vulnerability in Progress Software MOVEit AutomationEPSS 0.4%CVE-2026-8485MEDIUMUncontrolled Memory Allocation vulnerability in Progress Software MOVEit AutomationEPSS 0.3%CVE-2026-8487MEDIUMIncorrect default permissions vulnerability in Progress Software MOVEit AutomationEPSS 0.3%