Progress Moveit Automation — known CVE vulnerabilities

Every CVE whose affected-product data names Progress Moveit Automation, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (8)

• CVE-2026-4670 — CVSS 9.8 (critical): Authentication bypass by primary weakness vulnerability in Progress Software MOVEit Automation allows Authentication Bypass. This issue…
• CVE-2026-5174 — CVSS 7.7 (high): Improper input validation vulnerability in Progress Software MOVEit Automation allows Privilege Escalation. This issue affects MOVEit…
• CVE-2026-8487 — CVSS 6.5 (medium): Incorrect default permissions vulnerability in Progress Software MOVEit Automation allows Retrieve Embedded Sensitive Data. This issue…
• CVE-2024-4563 — CVSS 6.1 (medium): The Progress MOVEit Automation configuration export function prior to 2024.0.0 uses a cryptographic method with insufficient bit length.
• CVE-2020-12677 — CVSS 6.1 (medium): An issue was discovered in Progress MOVEit Automation Web Admin. A Web Admin application endpoint failed to adequately sanitize malicious…
• CVE-2026-8485 — CVSS 5.9 (medium): Uncontrolled Memory Allocation vulnerability in Progress Software MOVEit Automation allows Excessive Allocation. This issue affects MOVEit…
• CVE-2026-8486 — CVSS 5.3 (medium): Allocation of resources without limits or throttling vulnerability in Progress Software MOVEit Automation allows Flooding. This issue…
• CVE-2026-8488 — CVSS 4.3 (medium): Allocation of resources without limits or throttling vulnerability in Progress Software MOVEit Automation allows Excessive Allocation. This…