vulnerability
Progress MOVEit Transfer Critical Vulnerability (CVE-2023-34362): Privilege Escalation and Unauthorized Access (Remote)
| Severity | CVSS | Published | Added | Modified |
|---|---|---|---|---|
| 10 | (AV:N/AC:L/Au:N/C:C/I:C/A:C) | May 31, 2023 | Jun 7, 2023 | Feb 10, 2026 |
Severity
10
CVSS
(AV:N/AC:L/Au:N/C:C/I:C/A:C)
Published
May 31, 2023
Added
Jun 7, 2023
Modified
Feb 10, 2026
Description
Progress has discovered a vulnerability in MOVEit Transfer that could lead to escalated privileges and potential unauthorized access to the environment. This check remotely interacts with the MOVEit Transfer API to detect versions to assess vulnerability.
Solution
progress-moveit-transfer-upgrade-latest
Rapid7 Labs
2026 Global Threat Landscape Report
The predictive window has collapsed. Exploitation follows disclosure in days. See how attackers are accelerating and how to stay ahead.