Skip to content
CVE PROGRAM SOURCE RECORD6.5 Medium

CVE-2026-8487

Incorrect default permissions vulnerability in Progress Software MOVEit Automation

Description

Incorrect default permissions vulnerability in Progress Software MOVEit Automation allows Retrieve Embedded Sensitive Data. This issue affects MOVEit Automation: before 2025.0.11, from 2025.1.0 before 2025.1.7.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Progress Software MOVEit Automation

Default version status: unaffected

  • 0 to < 2025.0.11affected
  • 2025.1.0 to < 2025.1.7affected

References