Insufficient Session Expiration vulnerability in Progress MOVEit Transfer.

Code

The project this record applies to. Exploit listings stay in References.

No public source repository is identified for this product.

Timeline

Detection, updates, and resolution for this record.

1. Oct 14, 2026 · NIST NVD

   Detected

   Insufficient Session Expiration vulnerability in Progress MOVEit Transfer. This issue affects MOVEit Transfer: before 2025.1.6 and from 2026.0.0 before 2026.0.4.

2. Oct 15, 2026 · NIST NVD

   Updated

   Insufficient Session Expiration vulnerability in Progress MOVEit Transfer. This issue affects MOVEit Transfer: before 2025.1.6 and from 2026.0.0 before 2026.0.4.

3. Oct 15, 2026 · NIST NVD

   Updated

   Insufficient Session Expiration vulnerability in Progress MOVEit Transfer. This issue affects MOVEit Transfer: before 2025.1.6 and from 2026.0.0 before 2026.0.4.

4. Oct 15, 2026 · NIST NVD

   Updated

   Insufficient Session Expiration vulnerability in Progress MOVEit Transfer. This issue affects MOVEit Transfer: before 2025.1.6 and from 2026.0.0 before 2026.0.4.

Affected

• vendor Progress MOVEit Transferversion unspecified

Sources

• CIRCL Vulnerability LookupVulnerability recordCVE-2026-89073

  Insufficient Session Expiration vulnerability in Progress MOVEit Transfer. This issue affects MOVEit Transfer: before 2025.1.6 and from 2026.0.0 before 2026.0.4.

  vulnerability.circl.lu
• CVE.orgVulnerability recordCVE-2026-89073

  Insufficient Session Expiration vulnerability in Progress MOVEit Transfer. This issue affects MOVEit Transfer: before 2025.1.6 and from 2026.0.0 before 2026.0.4.

  cve.org
• FIRST EPSSExploitation probabilityCVE-2026-89073

  30-day exploitation probability 0.3%

  first.org
• NIST NVDVulnerability recordCVE-2026-89073

  Insufficient Session Expiration vulnerability in Progress MOVEit Transfer. This issue affects MOVEit Transfer: before 2025.1.6 and from 2026.0.0 before 2026.0.4.

  nvd.nist.gov

References

• Reference · community.progress.com