CVE-2026-89075: CWE-922 Insecure Storage of Sensitive Information in Progress MOVEit Transfer Radar - Latest Security Threats / 7h Insecure Storage of Sensitive Information vulnerability in Progress MOVEit Transfer. This issue affects MOVEit Transfer: before 2025.1.6 and from 2026.0.0 before 2026.0.4. (CVSS: 7.3)

Insecure Storage of Sensitive Information vulnerability in Progress MOVEit Transfer. This issue affects MOVEit Transfer: before 2025.1.6 and from 2026.0.0 before 2026.0.4.

Run on your own infrastructure? Check whether these packages are installed with threat-finder — our free open-source scanner.

Machine-generated threat intelligence

This vulnerability (CVE-2026-89075) in Progress MOVEit Transfer is classified as CWE-922 (Insecure Storage of Sensitive Information). It affects MOVEit Transfer versions prior to 2025.1.6 and versions from 2026.0.0 up to 2026.0.4. The CVSS v3.1 score is 7.3, indicating high severity, with attack vector local, low attack complexity, requiring low privileges and user interaction, and impacts confidentiality, integrity, and availability. The vulnerability allows sensitive information to be stored insecurely, potentially exposing it to unauthorized access or modification.

Successful exploitation could lead to full compromise of confidentiality, integrity, and availability of sensitive information stored by MOVEit Transfer. This could result in unauthorized data disclosure, data tampering, and disruption of service. The CVSS vector indicates that an attacker with local access and low privileges could exploit this vulnerability with user interaction.

Mitigation Recommendations

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. No official patch or workaround information was provided in the input data. Users should monitor Progress's official advisories for updates and apply any available fixes promptly once released.

Threat ID: 6acfa0fb2cdf04f6569056ff

Added to database: 10/14/2026, 15:34:19 UTC

Last enriched: 10/14/2026, 15:48:28 UTC

Last updated: 10/14/2026, 19:34:08 UTC

Crowdsource mitigation strategies, intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.

Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.

Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.

Upgrade to Pro Console for AI refresh and higher limits.

For incident response and remediation, OffSeq services can help resolve threats faster.

Check if your credentials are on the dark web

Instant breach scanning across billions of leaked records. Free tier available.

Lead Pen Test Professional