CVE-2026-89067

LOWCVSS 8.8 · HIGH

Signal is active with 1 mentions in latest observed window

Immediate actions

Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

Authentication bypass using an alternate path or channel vulnerability in Progress MOVEit Transfer. This issue affects MOVEit Transfer: before 2025.1.6 and from 2026.0.0 before 2026.0.4.

Back to dashboard

0.0/ 10 priority

Sources & remediation

Other references

https://community.progress.com/s/article/MOVEit-Transfer-Critical-Security-Bulletin---September-2026

Weakness type (CWE)

CWE-288

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

NONE

Momentum

STABLE

Threat summary

2 mentions across 2 observed days
Momentum state: stable

What's happening

Peaked 1d ago at 1 mentions (2026-10-15); latest day: 1
2 total mentions across 2 days

Deep dive

Activity timeline2 mentions / 2d

Referenced assets2 URLs

By indicator

Full discourse2 posts

Daily CyberSecurity@Daily_CyberSec1d
Review the Progress security bulletin fixing 12 MOVEit Transfer vulnerabilities, including high-severity flaws CVE-2026-87093 and CVE-2026-89067. #MOVEitTransfer #ProgressSoftware #MFT #Cybersecurity #Vulnerability #InfoSec https://securityonline.info/progress-patches-moveit-transfer-vulnerabilities/
00020306
13.0K followersView on X
ADK Cyber@ADKCyber1d
Progress MOVEit Transfer has CVSS 8.8 auth bypass (CVE-2026-89067) before 2025.1.6 and 2026.0.x before 2026.0.4. Review deployments: https://nvd.nist.gov/vuln/detail/CVE-2026-89067 via NVD Recent High CVSS #CyberSecurity #InfoSec #Vulnerability #AI #MachineLearning https://t.co/OMGAREnO5O
0000039
99 followersView on X

Explore more

Back to dashboard