Review the Progress security bulletin fixing 12 MOVEit Transfer vulnerabilities, including high-severity flaws CVE-2026-87093 and CVE-2026-89067.
MOVEit Transfer
Progress patched three MOVEit Transfer flaws, including a stored XSS bug (CVE-2026-11903). No exploitation is confirmed. Update now.
Progress patched a High-severity DoS flaw (CVE-2025-10932) in MOVEit Transfer’s AS2 module. The vulnerability allows unauthenticated attackers to exhaust server resources. Patch to v2025.0.3 immediately.
TDECU, the largest credit union in Texas, reports a significant data breach affecting over 500,000 individuals. Find out what happened and how it may impact you.
Stay informed about the latest security threat: CVE-2024-6576. Discover the impact on MOVEit Transfer and how to secure your systems.
The publication of CVE-2024-5806 vulnerability details and (PoC) exploit code on June 25, 2024, has led to immediate exploitation attempts
PALIG announced that it was impacted by a widespread data security incident involving Progress Software’s MOVEit Transfer software
An unauthenticated attacker could potentially exploit the CVE-2023-36934 flaw to gain unauthorized access to the MOVEit Transfer database
CVE-2023-35036 is an SQL injection issue in the MOVEit Transfer web application, posing a risk to all of its versions
one such newly identified vulnerability - CVE-2023-34362 - a SQL injection vulnerability lurking in the MOVEit Transfer web application.