CVE-2026-89070
Authentication bypass by capture-replay vulnerability in Progress MOVEit Transfer (OIDC module).
Published Oct 14, 2026 · updated Oct 15, 2026 · Progress MOVEit Transfer
Authentication bypass by capture-replay vulnerability in Progress MOVEit Transfer (OIDC module). This issue affects MOVEit Transfer: before 2025.1.6 and from 2026.0.0 before 2026.0.4.
Code
The project this record applies to. Exploit listings stay in References.
No public source repository is identified for this product.
Timeline
Detection, updates, and resolution for this record.
Oct 14, 2026 · NIST NVD
Detected
Authentication bypass by capture-replay vulnerability in Progress MOVEit Transfer (OIDC module). This issue affects MOVEit Transfer: before 2025.1.6 and from 2026.0.0 before 2026.0.4.
Oct 15, 2026 · NIST NVD
Updated
Authentication bypass by capture-replay vulnerability in Progress MOVEit Transfer (OIDC module). This issue affects MOVEit Transfer: before 2025.1.6 and from 2026.0.0 before 2026.0.4.
Oct 15, 2026 · NIST NVD
Updated
Authentication bypass by capture-replay vulnerability in Progress MOVEit Transfer (OIDC module). This issue affects MOVEit Transfer: before 2025.1.6 and from 2026.0.0 before 2026.0.4.
Oct 15, 2026 · NIST NVD
Updated
Authentication bypass by capture-replay vulnerability in Progress MOVEit Transfer (OIDC module). This issue affects MOVEit Transfer: before 2025.1.6 and from 2026.0.0 before 2026.0.4.
Affected
- vendor Progress MOVEit Transferversion unspecified
Sources
- CIRCL Vulnerability LookupVulnerability recordCVE-2026-89070
Authentication bypass by capture-replay vulnerability in Progress MOVEit Transfer (OIDC module). This issue affects MOVEit Transfer: before 2025.1.6 and from 2026.0.0 before 2026.0.4.
vulnerability.circl.lu - CVE.orgVulnerability recordCVE-2026-89070
Official CVE identifier
cve.org - FIRST EPSSExploitation probabilityCVE-2026-89070
30-day exploitation probability 0.4%
first.org - NIST NVDVulnerability recordCVE-2026-89070
Authentication bypass by capture-replay vulnerability in Progress MOVEit Transfer (OIDC module). This issue affects MOVEit Transfer: before 2025.1.6 and from 2026.0.0 before 2026.0.4.
nvd.nist.gov