CVE-2026-89068
Missing critical step in authentication vulnerability in Progress MOVEit Transfer (LDAP module).
Published Oct 14, 2026 · updated Oct 15, 2026 · Progress MOVEit Transfer
Missing critical step in authentication vulnerability in Progress MOVEit Transfer (LDAP module). This issue affects MOVEit Transfer: before 2025.1.6 and from 2026.0.0 before 2026.0.4.
Code
The project this record applies to. Exploit listings stay in References.
No public source repository is identified for this product.
Timeline
Detection, updates, and resolution for this record.
Oct 14, 2026 · NIST NVD
Detected
Missing critical step in authentication vulnerability in Progress MOVEit Transfer (LDAP module). This issue affects MOVEit Transfer: before 2025.1.6 and from 2026.0.0 before 2026.0.4.
Oct 15, 2026 · NIST NVD
Updated
Missing critical step in authentication vulnerability in Progress MOVEit Transfer (LDAP module). This issue affects MOVEit Transfer: before 2025.1.6 and from 2026.0.0 before 2026.0.4.
Oct 15, 2026 · NIST NVD
Updated
Missing critical step in authentication vulnerability in Progress MOVEit Transfer (LDAP module). This issue affects MOVEit Transfer: before 2025.1.6 and from 2026.0.0 before 2026.0.4.
Oct 15, 2026 · NIST NVD
Updated
Missing critical step in authentication vulnerability in Progress MOVEit Transfer (LDAP module). This issue affects MOVEit Transfer: before 2025.1.6 and from 2026.0.0 before 2026.0.4.
Affected
- vendor Progress MOVEit Transferversion unspecified
Sources
- CIRCL Vulnerability LookupVulnerability recordCVE-2026-89068
Missing critical step in authentication vulnerability in Progress MOVEit Transfer (LDAP module). This issue affects MOVEit Transfer: before 2025.1.6 and from 2026.0.0 before 2026.0.4.
vulnerability.circl.lu - CVE.orgVulnerability recordCVE-2026-89068
Official CVE identifier
cve.org - FIRST EPSSExploitation probabilityCVE-2026-89068
30-day exploitation probability 0.5%
first.org - NIST NVDVulnerability recordCVE-2026-89068
Missing critical step in authentication vulnerability in Progress MOVEit Transfer (LDAP module). This issue affects MOVEit Transfer: before 2025.1.6 and from 2026.0.0 before 2026.0.4.
nvd.nist.gov