← Back

CVE-2026-10699

nvd nist
Published: Jul 8, 2026Modified: Jul 10, 2026

JSON object

Loading...
7.5
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Exploitability: 3.9 / Impact: 3.6
Source: security@progress.com (Secondary)

Description

Missing release of memory after effective lifetime vulnerability in Progress MOVEit Transfer (Custom Reports modules). This issue affects MOVEit Transfer: from 2025.0.0 before 2025.0.8, from 2025.1.0 before 2025.1.4, from 2026.0.0 before 2026.0.1.

Affected (4)

Progress
1 product
Moveit Transfer
Configuration A
4 vulnerable
Vulnerable SoftwareAffected Versions
Progress
Moveit Transfer
Up to 2024.1.8
Moveit Transfer
From 2025.0.0 to 2025.0.8
Moveit Transfer
From 2025.1.0 to 2025.1.4
Moveit Transfer
Version 2026.0.0

Related CWEs

CWE-401
Missing Release of Memory after Effective Lifetime
The product does not sufficiently track and release allocated memory after it has been used, which slowly consumes remaining memory.

References (1)

Source: security@progress.com
Vendor Advisory

Timeline

No history available yet.