WID-SEC-W-2026-1336

DeutschShown in its original language — a full translation is planned for a future version.

Progress Software MOVEit Automation: Mehrere Schwachstellen

view advisory published 2026-05-03

Ein Angreifer kann mehrere Schwachstellen in Progress Software MOVEit Automation ausnutzen, um Sicherheitsvorkehrungen zu umgehen oder um erweiterte Privilegien zu erlangen.

describes (2)

Related CVEs.

ID	severity	EPSS	exploitable	published
CVE-2026-5174US	high8.8	3.32% (89th)	—	2026-04-30
Improper input validation vulnerability in Progress Software MOVEit Automation allows Privilege Escalation. This issue affects MOVEit Automation: from 2025.1.0 before 2025.1.5, fr…
CVE-2026-4670US	—	5.04% (92nd)	—	2026-04-30
Authentication bypass by primary weakness vulnerability in Progress Software MOVEit Automation allows Authentication Bypass. This issue affects MOVEit Automation: from 2025.0.0 be…

references

External citations — patches, advisories, analysis.

MOVEit Automation Critical Security Alert Bulletin vom 2026-05-03external
Github CVE-2026-4670 vom 2026-05-03external
Github CVE-2026-5174 vom 2026-05-03external
WID-SEC-W-2026-1336 - CSAF Versionself
WID-SEC-2026-1336 - Portal Versionself

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan