CVE-2026-8800

LowCVSS 2.7

Published: 08/07/2026(UTC)Updated: 09/07/2026(UTC)Translated: 10/07/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.20%

9th percentile - higher than 9% of all known CVEs

Summary

Incorrect authorization vulnerability in the Audit User module of Progress MOVEit Transfer. The flaw allows unauthorized access to user audit functions.

Risk Assessment

The organization risks exposure of sensitive audit data and potential compromise of event log integrity.

Recommendation

Immediately update MOVEit Transfer to version 2025.0.7 or 2025.1.3 depending on the branch in use.

Original NVD description (English source)

Incorrect Authorization vulnerability in Progress MOVEit Transfer (Audit User module). This issue affects MOVEit Transfer: before 2025.0.7, from 2025.1.0 before 2025.1.3.