PT-2026-36124 · Progress · Moveit Automation

Airbus Seclab + 4 · Published 2026-04-30 · Updated 2026-04-30 · CVE-2026-5174

NVD

CVSS v3.1

7.7

High

Base vector

AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H

Improper input validation vulnerability in Progress Software MOVEit Automation allows Privilege Escalation.

This issue affects MOVEit Automation: from 2025.1.0 before 2025.1.5, from 2025.0.0 before 2025.0.9, from 2024.0.0 before 2024.1.8, versions prior to 2024.0.0.

Fix

RCE

Weakness Enumeration

CWE-20

Related Identifiers

CVE-2026-5174

Affected Products

Moveit Automation

References · 2

• https://community.progress.com/s/article/MOVEit-Automation-Critical-Security-Alert-Bulletin-April-2026-CVE-2026-4670-CVE-2026-5174 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-5174 · Security Note