Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
Missing release of memory after effective lifetime vulnerability in Progress MOVEit Transfer (Custom Reports modules). This issue affects MOVEit Transfer: from 2025.0.0 before 2025.0.8, from 2025.1.0 before 2025.1.4, from 2026.0.0 before 2026.0.1.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
NONE
If you run products in this scope, you should treat this CVE as relevant to your environment.
1 version affected across 1 product
MOVEit Transfer Critical Security Bulletin – June 2026 – (CVE-2026-10699, CVE-2026-10698, CVE-2026-11903) - Progress Community https://community.progress.com/s/article/MOVEit-Transfer-Critical-Security-Bulletin-June-2026
Post summary
The bulletin announces three new CVEs (CVE-2026-10699, CVE-2026-10698, CVE-2026-11903) but offers no details on PoC, exploitation, patches, or technical specifics.
2 of 2 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | progress | moveit_transfer | - | - | - |
| App | progress | moveit_transfer | 2026.0.0 | - | - |