Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
Improper Authentication vulnerability in Progress MOVEit Transfer. This issue affects MOVEit Transfer: before 2025.1.5, from 2026.0.0 before 2026.0.3.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
AVAILABLE
Momentum
STABLE
If you run products in this scope, you should treat this CVE as relevant to your environment.
| Date | Total | Labels |
|---|
| 2026-07-24 | 1 | Disclosure1 |
| 2026-07-30 | 1 | General1 |
| 2026-07-31 | 1 | Patch1 |
⚠️ Vulnerabilidades en productos Progress ❗ CVE-2026-15967 ❗ CVE-2026-15966 ❗ CVE-2026-10697 ➡️ Más info: https://www.cert.gov.py/vulnerabilidades-en-productos-progress-5/ https://t.co/T39j23thcn
Post summary
The post enumerates three new CVE IDs affecting Progress products and directs readers to a link for additional information, but offers no further technical or exploit details.
CVE-2026-10697 CVE-2026-15966 CVE-2026-15967 CVE-2026-15968 MOVEit Transfer 2026 Release Notes Fixed Issues in 2026.0.3 https://docs.progress.com/bundle/moveit-transfer-release-notes-2026/page/Fixed-Issues-in-2026.0.3.html
Post summary
The post references four CVEs that have been fixed in the MOVEit Transfer 2026.0.3 release, as indicated by the linked release notes.
#CVE-2026-10697 - Improper Authentication in Progress MOVEit Transfer. #CVSS 7.5. No patch yet. Mitigate immediately if affected. #CVEAlert #Progress #infosec #devsecops #devops #sysadmin https://www.valtersit.com/cve/CVE-2026-10697/
Post summary
The post announces CVE‑2026‑10697, an improper authentication flaw in Progress MOVEit Transfer with CVSS 7.5, notes that no patch exists yet, and urges immediate mitigation for affected systems.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | progress | moveit_transfer | - | - | - |