OCTOBER 22, 2026
Live Feed
Back to database
Case File

CVE-2026-89077

HIGH · CVSS 7.5 EPSS 0.45%

Source: NVD + CISA KEV + EPSS · Published 2026-10-14 · Last synced 2026-10-20

CyberRota Analysis

AI-Generated

An incorrect implementation of the authentication algorithm in the SFTP module of Progress MOVEit Transfer exposes the system to potential unauthorized access. Organizations using MOVEit Transfer versions prior to 2025.1.6 and between 2026.0.0 and 2026.0.4 should prioritize remediation to mitigate the risk of exploitation and protect sensitive data.

CVE
CVE-2026-89077
Severity
HIGH
CVSS
7.5
EPSS
0.45%

Original NVD Description

Incorrect implementation of authentication algorithm vulnerability in Progress MOVEit Transfer (SFTP module). This issue affects MOVEit Transfer: before 2025.1.6 and from 2026.0.0 before 2026.0.4.

Related CVEs

Other vulnerabilities affecting the same vendor(s)

CVE-2026-89076 HIGH CVE-2026-89075 HIGH CVE-2026-89074 HIGH CVE-2026-89073 HIGH CVE-2026-89072 HIGH CVE-2026-89071 HIGH