CVE-2026-10697
Received Received - Intake

Improper Authentication in Progress MOVEit Transfer

Vulnerability report for CVE-2026-10697, including description, CVSS score, EPSS score, affected products, exploitability, helpful resources, and attack-flow context.

Publication date: 2026-07-23

Last updated on: 2026-07-23

Assigner: Progress Software Corporation

Description

Improper Authentication vulnerability in Progress MOVEit Transfer. This issue affects MOVEit Transfer: before 2025.1.5, from 2026.0.0 before 2026.0.3.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-07-23
Last Modified
2026-07-23
Generated
2026-07-24
AI Q&A
2026-07-24
EPSS Evaluated
N/A
NVD

Affected Vendors & Products

Showing 2 associated CPEs
Vendor Product Version / Range
progress moveit_transfer to 2025.1.5 (exc)
progress moveit_transfer From 2026.0.0 (inc) to 2026.0.3 (exc)

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-287 When an actor claims to have a given identity, the product does not prove or insufficiently proves that the claim is correct.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This is an Improper Authentication vulnerability in Progress MOVEit Transfer. It affects versions before 2025.1.5 and from 2026.0.0 to before 2026.0.3. The flaw allows unauthorized access due to weak authentication mechanisms.

Impact Analysis

An attacker could exploit this to gain unauthorized access to MOVEit Transfer systems. This may lead to data theft, manipulation, or disruption of services. The high CVSS score indicates significant potential impact on confidentiality, integrity, and availability.

Compliance Impact

This vulnerability could lead to unauthorized data access, violating GDPR's data protection requirements and HIPAA's security rules. Organizations may face compliance penalties, legal liabilities, and reputational damage if exploited.

Mitigation Strategies

Upgrade MOVEit Transfer to version 2025.1.5 or later if using versions before 2025.1.5, or to version 2026.0.3 or later if using versions from 2026.0.0 before 2026.0.3.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-10697. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart