← Back

CVE-2026-8801

nvd nist
Published: Jul 8, 2026Modified: Jul 9, 2026

JSON object

Loading...
9.8
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Exploitability: 3.9 / Impact: 5.9
Source: NVD

Description

Path equivalence: vulnerability in Progress MOVEit Transfer (File Upload modules). This issue affects MOVEit Transfer: before 2025.0.8, from 2025.1.0 before 2025.1.4.

Affected (2)

Progress
1 product
Moveit Transfer
Configuration A
2 vulnerable
Vulnerable SoftwareAffected Versions
Progress
Moveit Transfer
Before 2025.0.8
Moveit Transfer
From 2025.1.0 to 2025.1.4

Related CWEs

CWE-46
Path Equivalence: 'filename ' (Trailing Space)
The product accepts path input in the form of trailing space ('filedir ') without appropriate validation, which can lead to ambiguous path resolution and allow an attacker to traverse the file system to unintended locations or access arbitrary files.

References (1)

Source: security@progress.com
Release Notes

Timeline

No history available yet.