agentprime: progress-moveit-transferEvery new CVE for progress-moveit-transfer.https://agentprime.io/CVE-2026-89077: MOVEit Transfer Identity validation flaw in SFTP authenticationhttps://agentprime.io/advisories/CVE-2026-89077/https://agentprime.io/advisories/CVE-2026-89077/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 14 Oct 2026 15:16:24 GMTCVECVE-2026-89076: MOVEit Transfer SQL injection in custom reportinghttps://agentprime.io/advisories/CVE-2026-89076/https://agentprime.io/advisories/CVE-2026-89076/CVSS 7.2 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 14 Oct 2026 15:15:23 GMTCVECVE-2026-89075: MOVEit Transfer Local Disclosure of Session Information Vulnerabilityhttps://agentprime.io/advisories/CVE-2026-89075/https://agentprime.io/advisories/CVE-2026-89075/CVSS 7.3 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 14 Oct 2026 15:14:28 GMTCVECVE-2026-89074: MOVEit Transfer Email MFA Bypasshttps://agentprime.io/advisories/CVE-2026-89074/https://agentprime.io/advisories/CVE-2026-89074/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 14 Oct 2026 15:12:49 GMTCVECVE-2026-89073: MOVEit Transfer Access restriction bypass in OAuth authenticationhttps://agentprime.io/advisories/CVE-2026-89073/https://agentprime.io/advisories/CVE-2026-89073/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 14 Oct 2026 15:11:30 GMTCVECVE-2026-89072: MOVEit Transfer Authorization Flaw in Certificate Managementhttps://agentprime.io/advisories/CVE-2026-89072/https://agentprime.io/advisories/CVE-2026-89072/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 14 Oct 2026 15:10:40 GMTCVECVE-2026-89071: MOVEit Transfer LDAP injection in certificate-based authenticationhttps://agentprime.io/advisories/CVE-2026-89071/https://agentprime.io/advisories/CVE-2026-89071/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 14 Oct 2026 15:09:45 GMTCVECVE-2026-89070: MOVEit Transfer OIDC Authentication Replay Vulnerabilityhttps://agentprime.io/advisories/CVE-2026-89070/https://agentprime.io/advisories/CVE-2026-89070/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 14 Oct 2026 15:08:46 GMTCVECVE-2026-89069: MOVEit Transfer Stored XSS Vulnerability in Ad Hoc Packageshttps://agentprime.io/advisories/CVE-2026-89069/https://agentprime.io/advisories/CVE-2026-89069/CVSS 8.0 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 14 Oct 2026 15:07:00 GMTCVECVE-2026-89068: MOVEit Transfer Authentication bypass in LDAP sign-onhttps://agentprime.io/advisories/CVE-2026-89068/https://agentprime.io/advisories/CVE-2026-89068/CVSS 8.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 14 Oct 2026 15:06:13 GMTCVECVE-2026-89067: MOVEit Transfer Secure Messaging Authentication Bypasshttps://agentprime.io/advisories/CVE-2026-89067/https://agentprime.io/advisories/CVE-2026-89067/CVSS 8.8 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 14 Oct 2026 15:05:26 GMTCVECVE-2026-87093: MOVEit Transfer Service Directory Writable by Local Users Enables Local Privilege Escalationhttps://agentprime.io/advisories/CVE-2026-87093/https://agentprime.io/advisories/CVE-2026-87093/CVSS 8.8 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 14 Oct 2026 15:04:16 GMTCVECVE-2026-15968: Stored XSS vulnerability in MOVEit Transferhttps://agentprime.io/advisories/CVE-2026-15968/https://agentprime.io/advisories/CVE-2026-15968/CVSS 7.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 23 Jul 2026 20:01:13 GMTCVECVE-2026-15967: MOVEit Transfer refresh-token processing does not enforce updated account restrictionshttps://agentprime.io/advisories/CVE-2026-15967/https://agentprime.io/advisories/CVE-2026-15967/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 23 Jul 2026 19:59:33 GMTCVECVE-2026-15966: Improper CORS handling in MOVEit Transferhttps://agentprime.io/advisories/CVE-2026-15966/https://agentprime.io/advisories/CVE-2026-15966/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 23 Jul 2026 19:58:01 GMTCVECVE-2026-10697: MFA Bypass in MOVEit Transferhttps://agentprime.io/advisories/CVE-2026-10697/https://agentprime.io/advisories/CVE-2026-10697/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 23 Jul 2026 19:54:48 GMTCVECVE-2026-8801: File Extension Restriction Bypass in MOVEit Transferhttps://agentprime.io/advisories/CVE-2026-8801/https://agentprime.io/advisories/CVE-2026-8801/CVSS 3.5 (Low). Published by the CVE Program. Not analysed by agentprime yet.Wed, 08 Jul 2026 19:56:03 GMTCVECVE-2026-8800: Cross-Org External Token Metadata accessible to AuditUser rolehttps://agentprime.io/advisories/CVE-2026-8800/https://agentprime.io/advisories/CVE-2026-8800/CVSS 2.7 (Low). Published by the CVE Program. Not analysed by agentprime yet.Wed, 08 Jul 2026 19:53:30 GMTCVECVE-2026-8651: IPv6 Loopback Spoof via Trusted Host Header Bypasses Origin Check in MOVEit Transferhttps://agentprime.io/advisories/CVE-2026-8651/https://agentprime.io/advisories/CVE-2026-8651/CVSS 3.7 (Low). Published by the CVE Program. Not analysed by agentprime yet.Wed, 08 Jul 2026 19:50:43 GMTCVECVE-2026-8650: Authenticated Path Traversal allows MOVEit admins to view arbitrary system fileshttps://agentprime.io/advisories/CVE-2026-8650/https://agentprime.io/advisories/CVE-2026-8650/CVSS 4.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 08 Jul 2026 19:47:25 GMTCVECVE-2026-8649: Institution scope bypass vulnerability in custom reportshttps://agentprime.io/advisories/CVE-2026-8649/https://agentprime.io/advisories/CVE-2026-8649/CVSS 6.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 08 Jul 2026 19:41:40 GMTCVECVE-2026-11903: Stored XSS in MOVEit Transfer Ad Hoc modulehttps://agentprime.io/advisories/CVE-2026-11903/https://agentprime.io/advisories/CVE-2026-11903/CVSS 8.0 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 08 Jul 2026 14:19:16 GMTCVECVE-2026-10699: Memory leak in SFTP service can result in a denial of service in MOVEit Transferhttps://agentprime.io/advisories/CVE-2026-10699/https://agentprime.io/advisories/CVE-2026-10699/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 08 Jul 2026 14:18:00 GMTCVECVE-2026-10698: Table scope bypass vulnerability in custom reportshttps://agentprime.io/advisories/CVE-2026-10698/https://agentprime.io/advisories/CVE-2026-10698/CVSS 7.2 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 08 Jul 2026 14:16:25 GMTCVECVE-2025-11235: MOVEit Transfer REST API does not require current password in order to initiate the password change processhttps://agentprime.io/advisories/CVE-2025-11235/https://agentprime.io/advisories/CVE-2025-11235/CVSS 3.7 (Low). Published by the CVE Program. Not analysed by agentprime yet.Tue, 06 Jan 2026 22:16:48 GMTCVECVE-2025-13147: External Service Interaction (DNS)https://agentprime.io/advisories/CVE-2025-13147/https://agentprime.io/advisories/CVE-2025-13147/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 19 Nov 2025 20:45:48 GMTCVECVE-2025-10932: AS2 module allows uncontrolled file uploadshttps://agentprime.io/advisories/CVE-2025-10932/https://agentprime.io/advisories/CVE-2025-10932/CVSS 8.2 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 29 Oct 2025 14:12:33 GMTCVECVE-2025-2324: A MOVEit Transfer user configured as a Shared Account can gain unintended List permissions on a folderhttps://agentprime.io/advisories/CVE-2025-2324/https://agentprime.io/advisories/CVE-2025-2324/CVSS 5.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 19 Mar 2025 15:23:03 GMTCVECVE-2024-6576: MOVEit Transfer Privilege Escalation Vulnerabilityhttps://agentprime.io/advisories/CVE-2024-6576/https://agentprime.io/advisories/CVE-2024-6576/CVSS 7.3 (High). Published by the CVE Program. Not analysed by agentprime yet.Mon, 29 Jul 2024 13:46:32 GMTCVECVE-2024-5806: MOVEit Transfer Authentication Bypass Vulnerabilityhttps://agentprime.io/advisories/CVE-2024-5806/https://agentprime.io/advisories/CVE-2024-5806/CVSS 9.1 (Critical). Critical: CVSS score 9.1: 9.0 or more. CVSS score 9.1 (7.0 or more) and EPSS 0.81 (0.1 or more): a high score and a real chance of exploitation in the next 30 days. Published by the CVE Program. Not analysed by agentprime yet.Tue, 25 Jun 2024 15:04:37 GMTCVEcritical