CVE-2026-87093 — MOVEit Transfer Service Directory Writable by Local Users Enables Local Privilege Escalation

CVE-2026-87093

MOVEit Transfer Service Directory Writable by Local Users Enables Local Privilege Escalation PUBLISHED

Description (CNA)

Incorrect Permission Assignment for Critical Resource vulnerability in Progress MOVEit Transfer. This issue affects MOVEit Transfer: before 2025.1.6 and from 2026.0.0 before 2026.0.4.

Affected (CNA)

Vendor / product	Versions
Progress / MOVEit Transfer	affected 0 before 2025.1.6; affected 2026.0.0 before 2026.0.4

CWE

CWE-732

References

https://community.progress.com/s/article/MOVEit-Transfer-Critical-Security-Bulletin---September-2026

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.