VulnSocial

CVE-2023-36934Active Exploitation(progress / moveit_transfer)

LOWCVSS 9.1 · CRITICAL

Exploitation ongoing with high activity in latest observed window (1 mentions)

Immediate actions

  • Prioritize remediation for progress moveit_transfer systems immediately
  • Assume compromise if assets are exposed
  • Track advisory updates for patch or workaround availability

Recommended action window: Immediate (within 24h)

NVD description

In Progress MOVEit Transfer before 2020.1.11 (12.1.11), 2021.0.9 (13.0.9), 2021.1.7 (13.1.7), 2022.0.7 (14.0.7), 2022.1.8 (14.1.8), and 2023.0.4 (15.0.4), a SQL injection vulnerability has been identified in the MOVEit Transfer web application that could allow an unauthenticated attacker to gain unauthorized access to the MOVEit Transfer database. An attacker could submit a crafted payload to a MOVEit Transfer application endpoint that could result in modification and disclosure of MOVEit database content.

progress CVEsBack to dashboard
3.5/ 10 priority

Sources & remediation

Patch / fix
Other references
Weakness type (CWE)
CWE-89

Priority

LOW

Exploitation

ACTIVE

PoC

NONE

Patch

AVAILABLE

Momentum

NONE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

  • moveit_transfer

Threat summary

  • Active exploitation appears in 1 classified signals
  • 1 mentions across 1 observed day

What's happening

  • Active exploitation reported across 1 signal
  • 1 total mentions across 1 day

Affected systems

Vendors
progress
Products
moveit_transfer

Deep dive

Activity timeline1 mentions / 1d
00111Mentions · 2026-08-07: 1Active Exploitation · 2026-08-07: 108-07
Signal classification1 categories
Active Exploitation
1100.0%
Full discourse1 post
  • ro0TCr4k@ro0TCr4k
    Active Exploitation

    The MOVEit CVE-2023-36934 zero-day is back, actively exploited again. Attackers are chaining it with auth bypasses. Patch pressure is back on for the holidays. Stay vigilant.

    Post summary

    The tweet confirms that CVE-2023-36934 is being actively exploited in real-world attacks and urges vigilance, without providing technical details, PoC, or specific patches.

    0000095
    469 followersView on X
CPE platform detail1 entries

1 of 1 entries

PartVendorProductVersionTarget SWTarget HW
Appprogressmoveit_transfer---

Explore more

Back to dashboardprogress CVEsmoveit_transfer vulnerabilities