CVE-2026-5174

HIGH 8.8CVE-2026-5174 · Published 30/04/2026 · updated 26/10/2026

In short

CVE-2026-5174 is a HIGH (CVSS 8.8) vulnerability affecting moveit automation (progress).
Chance of exploitation in the next 30 days (EPSS): 3.3%, higher than 88.6% of all vulnerabilities.
Fix: update to 2025.1.5, 2024.1.8 or later.

Package	Affected versions	Patched versions
moveit automation progress	`≥ 2025.0.0, < 2025.1.5< 2024.1.8`	`2025.1.52024.1.8`

Description

Improper input validation vulnerability in Progress Software MOVEit Automation allows Privilege Escalation. This issue affects MOVEit Automation: from 2025.1.0 before 2025.1.5, from 2025.0.0 before 2025.0.9, from 2024.0.0 before 2024.1.8, versions prior to 2024.0.0.

References

community.progress.com/s/article/MOVEit-Automation-Critical-Security-Alert-Bulletin-April-2026-CVE-2026-4670-CVE-2026-5174 · Vendor Advisory

More vulnerabilities in moveit automation

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

moveit automation

progress

≥ 2025.0.0, < 2025.1.5< 2024.1.8

2025.1.52024.1.8

More vulnerabilities in moveit automation

See all →