CVE-2026-8487 — Incorrect default permissions vulnerability in Progress Software MOVEit Automation

CVE-2026-8487

Incorrect default permissions vulnerability in Progress Software MOVEit Automation PUBLISHED

Description (CNA)

Incorrect default permissions vulnerability in Progress Software MOVEit Automation allows Retrieve Embedded Sensitive Data. This issue affects MOVEit Automation: before 2025.0.11, from 2025.1.0 before 2025.1.7.

Affected (CNA)

Vendor / product	Versions
Progress Software / MOVEit Automation	affected 0 before 2025.0.11; affected 2025.1.0 before 2025.1.7

CWE

CWE-276

References

https://docs.progress.com/bundle/moveit-automation-release-notes-2026/page/Fixed-Issues-2026.html

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.