Progress Patches Critical MOVEit Automation Bug Enabling Authentication Bypass

Progress Software has released updates to fix critical security vulnerabilities in MOVEit Automation, an enterprise file transfer solution.

• •CVE-2026-4670 (CVSS 9.8) enables authentication bypass through the service backend command port interfaces
• •CVE-2026-5174 (CVSS 7.7) is an improper input validation vulnerability allowing privilege escalation
• •Affected versions: MOVEit Automation 2025.1.4 and earlier, 2025.0.8 and earlier, 2024.1.7 and earlier
• •Exploitation could lead to unauthorized access, administrative control, and data exposure
• •Airbus SecLab researchers discovered the vulnerabilities; no workarounds available and immediate patching is critical

This summary was automatically generated by AI based on the original article and may not be fully accurate.