CVE-2026-10698

A vulnerability exists in the Custom Reports modules of Progress MOVEit Transfer, where improper neutralization of special elements in data query logic could allow an attacker to manipulate queries and potentially access sensitive information. Organizations using affected versions (2025.0.0 to 2025.0.8, 2025.1.0 to 2025.1.4, and 2026.0.0 to 2026.0.1) should prioritize patching to mitigate the risk of data exposure and unauthorized access. This issue is particularly critical for enterprises handling sensitive data or regulated information.