MOVEit Automation vulnerabilities

6 known vulnerabilities in MOVEit Automation from Progress Software. 6 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.5 High severity

  MOVEit Automation: Allocation of Resources Without Limits or Throttling

  CVE-2026-8488May 20, 2026Progress Software

  Allocation of resources without limits or throttling vulnerability in Progress Software MOVEit Automation allows Excessive Allocation. This issue affects MOVEit Automation: before 2025.0.11, from 2025.1.0 before 2025.1.7.

• 7.5 High severity

  MOVEit Automation: Incorrect Default Permissions

  CVE-2026-8487May 20, 2026Progress Software

  Incorrect default permissions vulnerability in Progress Software MOVEit Automation allows Retrieve Embedded Sensitive Data. This issue affects MOVEit Automation: before 2025.0.11, from 2025.1.0 before 2025.1.7.

• 7.5 High severity

  MOVEit Automation: Allocation of Resources Without Limits or Throttling

  CVE-2026-8486May 20, 2026Progress Software

  Allocation of resources without limits or throttling vulnerability in Progress Software MOVEit Automation allows Flooding. This issue affects MOVEit Automation: before 2025.0.11, from 2025.1.0 before 2025.1.7.

• 7.5 High severity

  MOVEit Automation: Memory Allocation with Excessive Size Value

  CVE-2026-8485May 20, 2026Progress Software

  Uncontrolled Memory Allocation vulnerability in Progress Software MOVEit Automation allows Excessive Allocation. This issue affects MOVEit Automation: before 2025.0.11, from 2025.1.0 before 2025.1.7.

• 8.8 High severity

  Improper input validation vulnerability in Progress Software MOVEit Automation allows…

  CVE-2026-5174Apr 30, 2026Progress SoftwareEPSS 3.32%

  Improper input validation vulnerability in Progress Software MOVEit Automation allows Privilege Escalation. This issue affects MOVEit Automation: from 2025.1.0 before 2025.1.5, from 2025.0.0 before 2025.0.9, from 2024.0.0 before 2024.1.8, versions prior to 202

• 9.8 Critical severity

  MOVEit Automation: Authentication Bypass by Primary Weakness

  CVE-2026-4670Apr 30, 2026Progress SoftwareEPSS 5.04%

  Authentication bypass by primary weakness vulnerability in Progress Software MOVEit Automation allows Authentication Bypass. This issue affects MOVEit Automation: from 2025.0.0 before 2025.0.9, from 2024.0.0 before 2024.1.8, versions prior to 2024.0.0.