OCTOBER 22, 2026
Live Feed
Back to database
Case File

CVE-2026-89071

HIGH · CVSS 7.5 EPSS 0.49%

Source: NVD + CISA KEV + EPSS · Published 2026-10-14 · Last synced 2026-10-20

CyberRota Analysis

AI-Generated

The vulnerability in Progress MOVEit Transfer's LDAP module allows for LDAP injection due to improper neutralization of special elements in LDAP queries, potentially enabling attackers to manipulate queries and gain unauthorized access to sensitive data. Organizations using versions prior to 2025.1.6 and between 2026.0.0 and 2026.0.4 should prioritize patching this issue to mitigate the risk of data breaches and unauthorized access.

CVE
CVE-2026-89071
Severity
HIGH
CVSS
7.5
EPSS
0.49%

Original NVD Description

Improper neutralization of special elements used in an LDAP query ('LDAP injection') vulnerability in Progress MOVEit Transfer (LDAP module). This issue affects MOVEit Transfer: before 2025.1.6 and from 2026.0.0 before 2026.0.4.

Related CVEs

Other vulnerabilities affecting the same vendor(s)

CVE-2026-89077 HIGH CVE-2026-89076 HIGH CVE-2026-89075 HIGH CVE-2026-89074 HIGH CVE-2026-89073 HIGH CVE-2026-89072 HIGH