CVE-2026-4670

Published: Apr 30, 2026Modified: Jun 17, 2026

9.8

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Exploitability: 3.9 / Impact: 5.9

Source: security@progress.com (Secondary)

Description

Authentication bypass by primary weakness vulnerability in Progress Software MOVEit Automation allows Authentication Bypass. This issue affects MOVEit Automation: from 2025.0.0 before 2025.0.9, from 2024.0.0 before 2024.1.8, versions prior to 2024.0.0.

Affected (2)

Products: Progress: Moveit Automation

1 product

Moveit Automation

Configuration A

2 vulnerable

Vulnerable Software	Affected Versions
Progress Moveit Automation	Before 2024.1.8
Progress Moveit Automation	From 2025.0.0 to 2025.1.5

Related CWEs

Authentication Bypass by Primary Weakness

The authentication algorithm is sound, but the implemented mechanism can be bypassed as the result of a separate weakness that is primary to the authentication error.

References (1)

https://community.progress.com/s/article/MOVEit-Automation-Critical-Security-Alert-Bulletin-April-2026-CVE-2026-4670-CVE-2026-5174

Source: security@progress.com

Vendor Advisory

Timeline

No history available yet.