tldrdailynews.com logo

MOVEit Automation hit by critical auth bypass; users urged to upgrade

1 min read
Source: BleepingComputer
MOVEit Automation hit by critical auth bypass; users urged to upgrade
Photo: BleepingComputer
TL;DR

Progress Software warned of a critical authentication bypass in MOVEit Automation (CVE-2026-4670) affecting older builds, with remote attackers able to exploit it without privileges or user interaction. Upgrading to the patched release via the full installer is the recommended remediation, and expect an outage during the upgrade. The advisory also covers a high-severity privilege-escalation flaw (CVE-2026-5174). Shodan data shows about 1,400 MOVEit Automation instances publicly exposed online, including some tied to U.S. government agencies, underscoring the urgency of patching amid MOVEit’s history of exploited vulnerabilities.

Topics:technologysecurity#authentication-bypass#cve-2026-4670#cve-2026-5174#exposed-online#moveit-automation#security
Share this article
  1. Progress warns of critical MOVEit Automation auth bypass flaw  BleepingComputer
  2. Progress Patches Critical MOVEit Automation Bug Enabling Authentication Bypass  The Hacker News
  3. Critical MOVEit Automation auth bypass vulnerability fixed (CVE-2026-4670)  Help Net Security
  4. Critical MOVEit Vulnerabilities Enables Authentication Bypass  CyberSecurityNews
  5. New MOVEit vulnerabilities prompt urgent vendor warning  Cybersecurity Dive

Want the full story? Read the original reporting

Read on BleepingComputer