CVE-2026-89069

MEDIO 5.4CVE-2026-89069 · Published 14/10/2026 · updated 19/10/2026

En resumen

CVE-2026-89069 es una vulnerabilidad MEDIO (CVSS 5.4) que afecta a moveit transfer (progress).
Probabilidad de explotación en los próximos 30 días (EPSS): 0.44%, mayor que el 38.0% de las vulnerabilidades.
Solución: actualizar a 2026.0.4, 2025.1.6 o posterior.

Package	Affected versions	Patched versions
moveit transfer progress	`≥ 2026.0.0, < 2026.0.4< 2025.1.6`	`2026.0.42025.1.6`

Description

Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in Progress MOVEit Transfer (Ad Hoc module). This issue affects MOVEit Transfer: before 2025.1.6 and from 2026.0.0 before 2026.0.4.

References

community.progress.com/s/article/MOVEit-Transfer-Critical-Security-Bulletin---September-2026 · Vendor Advisory

Más vulnerabilidades de moveit transfer

Ver todo →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

moveit transfer

progress

≥ 2026.0.0, < 2026.0.4< 2025.1.6

2026.0.42025.1.6

Más vulnerabilidades de moveit transfer

Ver todo →