9.8 CriticalCWE-305
CVE-2026-4670
Progress Software MOVEit Automation vulnerability
Progress SoftwareMOVEit Automation
Status
- Not in CISA KEV
- Vendor fix available
Exploit probabilityEPSSchecked 21 Oct
0.6%probability of exploitation in the next 30 days
Higher than 48% of scored CVEs
SeverityCVSS
9.8Critical
Description NVD
Authentication bypass by primary weakness vulnerability in Progress Software MOVEit Automation allows Authentication Bypass. This issue affects MOVEit Automation: from 2025.0.0 before 2025.0.9, from 2024.0.0 before 2024.1.8, versions prior to 2024.0.0.
Coverage 3 articles · 2 outlets
See the full timelineShow as table
| Published (UTC) | Outlet | Headline |
|---|---|---|
| Mon 4 May · 17:23 UTC | The Hacker News | Progress patches critical MOVEit auth bypass, CVE-2026-4670 |
| Mon 4 May · 22:31 UTC | Security Affairs | Progress fixes MOVEit Automation flaws opening door to file hacks |
| Thu 7 May · 12:31 UTC | The Hacker News | MOVEit Automation flaw CVE-2026-4670 forces rapid patch push |
- MOVEit Automation flaw CVE-2026-4670 forces rapid patch pushThe Hacker News
- Progress fixes MOVEit Automation flaws opening door to file hacksSecurity Affairs
- Progress patches critical MOVEit auth bypass, CVE-2026-4670The Hacker News · first in our coverage