CVE-2026-10699

HIGH 7.5CVE-2026-10699 · Published 08/07/2026 · updated 25/10/2026

In short

CVE-2026-10699 is a HIGH (CVSS 7.5) vulnerability affecting moveit transfer (progress).
Chance of exploitation in the next 30 days (EPSS): 0.49%, higher than 42.4% of all vulnerabilities.
Fix: update to 2025.0.8, 2025.1.4 or later.

Package	Affected versions	Patched versions
moveit transfer progress	`= 2026.0.0≥ 2025.0.0, < 2025.0.8≥ 2025.1.0, < 2025.1.4≤ 2024.1.8`	`2025.0.82025.1.4`

Description

Missing release of memory after effective lifetime vulnerability in Progress MOVEit Transfer (Custom Reports modules). This issue affects MOVEit Transfer: from 2025.0.0 before 2025.0.8, from 2025.1.0 before 2025.1.4, from 2026.0.0 before 2026.0.1.

References

community.progress.com/s/article/MOVEit-Transfer-Critical-Security-Bulletin-June-2026 · Vendor Advisory

More vulnerabilities in moveit transfer

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

moveit transfer

progress

= 2026.0.0≥ 2025.0.0, < 2025.0.8≥ 2025.1.0, < 2025.1.4≤ 2024.1.8

2025.0.82025.1.4

More vulnerabilities in moveit transfer

See all →