AI and data stack advisories

Severe, 6 weeks1496Projects326

1496 severe, 6 weeks · 326 projects

Progress SoftwareCVE-2026-8650

Progress Software MOVEit Transfer: path traversal

Progress Software

CVE-2026-8650 · Published Jul 8, 2026 · updated Jul 9, 2026

Medium4.5
Fix: upgrade to 2025.1.3 or later (2 fixed versions below)
Progress Software advisory

Relative path traversal vulnerability in Progress MOVEit Transfer (Admin Settings module).

This issue affects MOVEit Transfer: before 2025.0.7, from 2025.1.0 before 2025.1.3.

Affected versions

PackageAffectedFixed in
MOVEit Transfer
Product
>= 2025.1.0, < 2025.1.32025.1.3
< 2025.0.72025.0.7
Details and references
CVSS 3.1
CVSS:3.1/AV:A/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N
Severity from
the vendor (its own CVE record or advisory)
Weakness
CWE-23

More Progress Software advisories

All Progress Software
Low 3.5Jul 8Path equivalence: vulnerability in Progress MOVEit TransferCVE-2026-8801fixed in 2025.1.4 +1Medium 6.4Jul 8Improper Neutralization of Special Elements in Data Query Logic vulnerability...CVE-2026-8649fixed in 2025.1.3 +1Low 3.7Jul 8Progress Software MOVEit Transfer: authentication bypassCVE-2026-8651fixed in 2025.1.3 +1Low 2.7Jul 8Progress Software MOVEit Transfer: improper authorizationCVE-2026-8800fixed in 2025.1.3 +1High 7.2Jul 8Improper Neutralization of Special Elements in Data Query Logic vulnerability...CVE-2026-10698fixed in 2025.0.8 +2High 7.5Jul 8Progress Software MOVEit Transfer: memory leakCVE-2026-10699fixed in 2025.0.8 +2