CVE-2026-8649

CVSS Score & Metrics

Base Score

6.4 / 10

Vector String

                                        CVSS:3.1/AV:N/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:H                                    

Vulnerability Description

Improper Neutralization of Special Elements in Data Query Logic vulnerability in Progress MOVEit Transfer (Custom Reports modules).

This issue affects MOVEit Transfer: before 2025.0.7, from 2025.1.0 before 2025.1.3.

Vulnerability Details

Published Date

July 08, 2026

Last Modified

July 10, 2026

CWE ID

CWE-943

Source

NVD

Vendor

progress

Product

moveit_transfer

External References

https://docs.progress.com/bundle/moveit-transfer-release-notes-2026/page/Fixed-Issues-in-2026.html

CVSS Score & Metrics

Vulnerability Description

Vulnerability Details

External References

Discussion (0)

Add Comment