PT-2026-36123 · Progress · Moveit Automation

Airbus Seclab + 4 · Published 2026-04-30 · Updated 2026-04-30 · CVE-2026-4670

Mitre

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Authentication bypass by primary weakness vulnerability in Progress Software MOVEit Automation allows Authentication Bypass.

This issue affects MOVEit Automation: from 2025.0.0 before 2025.0.9, from 2024.0.0 before 2024.1.8, versions prior to 2024.0.0.

Fix

Weakness Enumeration

CWE-305

Related Identifiers

CVE-2026-4670

Affected Products

Moveit Automation

References · 2

• https://community.progress.com/s/article/MOVEit-Automation-Critical-Security-Alert-Bulletin-April-2026-CVE-2026-4670-CVE-2026-5174 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-4670 · Security Note