7.7 HighCWE-20
CVE-2026-5174
Progress Software MOVEit Automation vulnerability
Progress SoftwareMOVEit Automation
Status
- Not in CISA KEV
- Vendor fix available
Exploit probabilityEPSSchecked 23 Oct
0.5%probability of exploitation in the next 30 days
Higher than 42% of scored CVEs
SeverityCVSS
7.7High
Description NVD
Improper input validation vulnerability in Progress Software MOVEit Automation allows Privilege Escalation. This issue affects MOVEit Automation: from 2025.1.0 before 2025.1.5, from 2025.0.0 before 2025.0.9, from 2024.0.0 before 2024.1.8, versions prior to 2024.0.0.
Coverage 2 articles · 2 outlets
See the full timelineShow as table
| Published (UTC) | Outlet | Headline |
|---|---|---|
| Mon 4 May · 17:23 UTC | The Hacker News | Progress patches critical MOVEit auth bypass, CVE-2026-4670 |
| Mon 4 May · 22:31 UTC | Security Affairs | Progress fixes MOVEit Automation flaws opening door to file hacks |
- Progress fixes MOVEit Automation flaws opening door to file hacksSecurity Affairs · mentions it in passing
- Progress patches critical MOVEit auth bypass, CVE-2026-4670The Hacker News · first in our coverage · mentions it in passing