CVE Catalog
CVE-2026-8487
MediumCVSS 6.5Exploitation Probability (EPSS)
Low risk0.28%
20th percentile - higher than 20% of all known CVEs
Summary
Incorrect default permissions vulnerability in Progress Software MOVEit Automation allows Retrieve Embedded Sensitive Data. This issue affects MOVEit Automation: before 2025.0.11, from 2025.1.0 before 2025.1.7.
Risk Assessment
An attacker could access sensitive data stored in automation configuration.
Recommendation
Update MOVEit Automation to version 2025.0.11, 2025.1.7, or later.
Original NVD description (English source)
Incorrect default permissions vulnerability in Progress Software MOVEit Automation allows Retrieve Embedded Sensitive Data. This issue affects MOVEit Automation: before 2025.0.11, from 2025.1.0 before 2025.1.7.