Back Feedly

CVE-2026-89075 - Exploits & Severity

Feedly • October 14, 2026

Insecure Storage of Sensitive Information vulnerability in Progress MOVEit Transfer. This issue affects MOVEit Transfer: before 2025.1.6 and from 2026.0.0 before 2026.0.4.

CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H

Feedly found the first article mentioning CVE-2026-89075 . See article

NVD published the first details for CVE-2026-89075

A CVSS base score of 7.3 has been assigned.

CVE-2026-89075 - Exploits & Severity - Feedly

CVE-2026-89075: CWE-922 Insecure Storage of Sensitive Information in Progress MOVEit Transfer

Be the first to know critical vulnerabilities

Collect, analyze, and vulnerability reports faster using AI

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Vulnerabilities Found in Progress MOVEit Transfer Two vulnerabilities, CVE-2026-89068 and CVE-2026-89075, have been identified in Progress MOVEit Transfer. CVE-2026-89068, a missing step in authentication, affects versions before 2025.1.6 and from 2026.0.0 to 2026.0.4, allowing unauthenticated attackers to bypass authentication controls. CVE-2026-89075 involves insecure storage of sensitive information, also affecting the same versions, which could lead to unauthorized access to sensitive data. Both vulnerabilities have been assigned high CVSS scores of 8.1 and 7.3, respectively. Patches for both vulnerabilities are available, and users are urged to upgrade immediately. There is currently no evidence of public exploitation for either CVE. Monitoring of authentication logs and restricting network access are recommended if immediate patching is not feasible. 2 sources 65

Extracted Entities

CVE-2026-89075 - Exploits & Severity

The full story

Extracted Entities

CVEs (1)

CWE Weaknesses (1)

Platforms (1)