- Products & ServicesProducts & Services
- SolutionsSolutions
- PricingPricing
- CompanyCompany
- ResourcesResources
en
en
Verify to analyze this security profile
As of 10/23/2026, MOVEit Transfer recorded 12 security vulnerabilities in the last 90 days, of which 12 are rated High or Critical. None of these vulnerabilities is actively exploited (KEV) according to CISA's catalog. CyStack recommends that organizations and individual users apply patches as soon as possible.
CyStack does not yet have sufficient official-source data to identify the latest version of MOVEit Transfer and determine which vulnerabilities affect that version.
CyStack VulnScan continuously discovers assets, validates vulnerabilities, and helps security teams prioritize remediation across the organization.
CVE-2026-89077MOVEit Transfer Identity validation flaw in SFTP authenticationCVE-2026-89076MOVEit Transfer SQL injection in custom reportingCVE-2026-89075MOVEit Transfer Local Disclosure of Session Information VulnerabilityCVE-2026-89074MOVEit Transfer Email MFA BypassCVE-2026-89073MOVEit Transfer Access restriction bypass in OAuth authentication| Vulnerability | Exploitation status | Fix | Published | Severity |
|---|---|---|---|---|
CVE-2026-89077MOVEit Transfer Identity validation flaw in SFTP authentication | Exploitation statusNot exploited | FixYes | Published10/14/2026 | SeverityHigh |
CVE-2026-89076MOVEit Transfer SQL injection in custom reporting | Exploitation statusNot exploited | FixYes | Published10/14/2026 | SeverityHigh |
CVE-2026-89075MOVEit Transfer Local Disclosure of Session Information Vulnerability | Exploitation statusNot exploited | FixYes | Published10/14/2026 | SeverityHigh |
CVE-2026-89074MOVEit Transfer Email MFA Bypass | Exploitation statusNot exploited | FixYes | Published10/14/2026 | SeverityHigh |
CVE-2026-89073MOVEit Transfer Access restriction bypass in OAuth authentication | Exploitation statusNot exploited | FixYes | Published10/14/2026 | SeverityHigh |
CVE-2026-89072MOVEit Transfer Authorization Flaw in Certificate Management | Exploitation statusNot exploited | FixYes | Published10/14/2026 | SeverityHigh |
CVE-2026-89071MOVEit Transfer LDAP injection in certificate-based authentication | Exploitation statusNot exploited | FixYes | Published10/14/2026 | SeverityHigh |
CVE-2026-89070MOVEit Transfer OIDC Authentication Replay Vulnerability | Exploitation statusNot exploited | FixYes | Published10/14/2026 | SeverityHigh |
CVE-2026-89069MOVEit Transfer Stored XSS Vulnerability in Ad Hoc Packages | Exploitation statusNot exploited | FixYes | Published10/14/2026 | SeverityHigh |
CVE-2026-89068MOVEit Transfer Authentication bypass in LDAP sign-on | Exploitation statusNot exploited | FixYes | Published10/14/2026 | SeverityHigh |
30 Results | Page 1 of 3