VulnSocial

CVE-2026-15967Disclosure(progress / moveit_transfer)

LOWCVSS 9.8 · CRITICAL

Signal is active with 1 mentions in latest observed window

Immediate actions

  • Patch progress moveit_transfer systems immediately

Recommended action window: Monitor and triage in normal cycle

NVD description

Insufficient session expiration vulnerability in Progress MOVEit Transfer. This issue affects MOVEit Transfer: before 2025.1.5, from 2026.0.0 before 2026.0.3.

progress CVEsBack to dashboard
0.5/ 10 priority

Sources & remediation

Vendor / third-party advisories
Weakness type (CWE)
CWE-613

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

AVAILABLE

Momentum

STABLE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

  • moveit_transfer

Threat summary

  • Patch or workaround signal is available
  • 4 mentions across 3 observed days
  • Momentum state: stable

What's happening

  • Patch or workaround mentioned in 1 signal
  • Technical details provided in 2 signals
  • Disclosure: 2 classified signals
  • General: 1 classified signal
  • Peaked 2d ago at 2 mentions (2026-07-24); latest day: 1
  • 4 total mentions across 3 days

Affected systems

Vendors
progress
Products
moveit_transfer

Deep dive

Activity timeline4 mentions / 3d
01122Mentions · 2026-07-24: 2Mentions · 2026-07-30: 1Mentions · 2026-07-31: 1Patch / Workaround · 2026-07-31: 1Technical Details · 2026-07-24: 207-2407-3007-31
Signal classification3 categories
Disclosure
250.0%
General
125.0%
Patch
125.0%
Referenced assets4 URLs
Classification over time
DateTotalLabels
2026-07-242
Disclosure2
2026-07-301
General1
2026-07-311
Patch1
Full discourse4 posts
  • CERT-PY@CERTpy
    General

    ⚠️ Vulnerabilidades en productos Progress ❗ CVE-2026-15967 ❗ CVE-2026-15966 ❗ CVE-2026-10697 ➡️ Más info: https://www.cert.gov.py/vulnerabilidades-en-productos-progress-5/ https://t.co/T39j23thcn

    Post summary

    The post announces three CVEs affecting Progress products and links to a CERT page for further detail, but provides no additional technical or exploitation information.

    00001213
    6.7K followersView on X
  • Autumn Good@autumn_good_35
    Patch

    CVE-2026-10697 CVE-2026-15966 CVE-2026-15967 CVE-2026-15968 MOVEit Transfer 2026 Release Notes Fixed Issues in 2026.0.3 https://docs.progress.com/bundle/moveit-transfer-release-notes-2026/page/Fixed-Issues-in-2026.0.3.html

    Post summary

    The provided notice lists four CVEs that are addressed in the MOVEit Transfer 2026.0.3 release, confirming that patches are available.

    00000447
    7.0K followersView on X
  • Infoflowcloud@infoflowcloud
    Disclosure

    🚨*CVE* CVE-2026-15967 Insufficient session expiration vulnerability in Progress MOVEit Transfer. This issue affects MOVEit Transfer: before 2025.1.5, from 2026.0.0 before 2026.0.3. https://www.cve.org/CVERecord?id=CVE-2026-15967 ----- Traducción: CVE-2026-15967 Vulnerabilid… http://infoflow.cloud`

    Post summary

    The post announces CVE-2026-15967, an insufficient session expiration issue in Progress MOVEit Transfer affecting versions before 2025.1.5 and 2026.0.3, with a link to the official CVE record.

    0000048
    94 followersView on X
  • CVE@CVEnew
    Disclosure

    CVE-2026-15967 Insufficient session expiration vulnerability in Progress MOVEit Transfer. This issue affects MOVEit Transfer: before 2025.1.5, from 2026.0.0 before 2026.0.3. https://www.cve.org/CVERecord?id=CVE-2026-15967

    Post summary

    The text announces CVE‑2026‑15967, listing affected versions and a link, but provides no PoC, exploit, or patch details.

    000001.2K
    57.9K followersView on X
CPE platform detail1 entries

1 of 1 entries

PartVendorProductVersionTarget SWTarget HW
Appprogressmoveit_transfer---

Explore more

Back to dashboardprogress CVEsmoveit_transfer vulnerabilities