CVE-2026-89072

Undergoing Analysis Undergoing Analysis - In Progress

Incorrect Authorization in Progress MOVEit Transfer Client Certificates Module

Publication date: 2026-10-14

Last updated on: 2026-10-15

Assigner: Progress Software Corporation

Description

Incorrect Authorization vulnerability in Progress MOVEit Transfer (Client Certificates module). This issue affects MOVEit Transfer: before 2025.1.6 and from 2026.0.0 before 2026.0.4.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-10-14

Last Modified

2026-10-15

Generated

2026-10-19

AI Q&A

2026-10-15

EPSS Evaluated

2026-10-18

NVD

CVE-2026-89072

EUVD

EUVD-2026-101153

Affected Vendors & Products

Vendor	Product	Version / Range
Progress	MOVEit	Transfer 0
Progress	MOVEit	Transfer 2026.0.0

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-863	The product performs an authorization check when an actor attempts to access a resource or perform an action, but it does not correctly perform the check.

Attack-Flow Graph

Executive Summary

This is an Incorrect Authorization vulnerability in Progress MOVEit Transfer's Client Certificates module. It allows unauthorized access to sensitive functions due to improper permission checks. The flaw exists in versions before 2025.1.6 and from 2026.0.0 to 2026.0.4.

Impact Analysis

An attacker could exploit this to gain elevated privileges, access sensitive data, or perform unauthorized actions on the MOVEit Transfer system. This could lead to data breaches or system compromise.

Compliance Impact

This vulnerability could lead to unauthorized access to personal or sensitive data, violating GDPR and HIPAA requirements for data protection and access controls. Non-compliance may result in legal penalties.

Mitigation Strategies

Update Progress MOVEit Transfer to version 2025.1.6 or later if using versions before 2025.1.6, or to 2026.0.4 or later if using versions from 2026.0.0.

Hi! I’m here to help you understand CVE-2026-89072. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70