CVE-2026-4670

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2026-4670
Authentication bypass by primary weakness vulnerability in Progress Software MOVEit Automation allows Authentication Bypass. This issue affects MOVEit Automation: from 2025.0.0 before 2025.0.9, from 2024.0.0 before 2024.1.8, versions prior to 2024.0.0.

9.8 /10

CVSS v3 : CRITICAL

V3 Legend

Vector :

Exploitability : 3.9 / Impact : 5.9

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact HIGH

Scope UNCHANGED

References
Link Resource
https://community.progress.com/s/article/MOVEit-Automation-Critical-Security-Alert-Bulletin-April-2026-CVE-2026-4670-CVE-2026-5174 Vendor Advisory
Configurations

Configuration 1 (hide)

OR cpe:2.3:a:progress:moveit_automation:*:*:*:*:*:*:*:*
cpe:2.3:a:progress:moveit_automation:*:*:*:*:*:*:*:*
History

04 May 2026, 18:20

Type Values Removed Values Added
CPE cpe:2.3:a:progress:moveit_automation:*:*:*:*:*:*:*:*
First Time Progress
Progress moveit Automation
References () https://community.progress.com/s/article/MOVEit-Automation-Critical-Security-Alert-Bulletin-April-2026-CVE-2026-4670-CVE-2026-5174 - () https://community.progress.com/s/article/MOVEit-Automation-Critical-Security-Alert-Bulletin-April-2026-CVE-2026-4670-CVE-2026-5174 - Vendor Advisory

30 Apr 2026, 17:20

Type Values Removed Values Added
New CVE
Information

Published : 2026-04-30 16:16

Updated : 2026-05-04 18:20

NVD link : CVE-2026-4670

Mitre link : CVE-2026-4670

CVE.ORG link : CVE-2026-4670

JSON object : View

Products Affected

progress

  • moveit_automation
CWE
CWE-305

Authentication Bypass by Primary Weakness