NewA calmer, faster ZeroHour — security assessments on articles, story timelines and search from any page.

Vulnerability2 · 1 read

CVE-2024-5805

CVSS 3.1: 9.1 critical
EPSS: 8%p94
Published: Jun 25, 2024 · Jun 25, 2024
Modified: Jun 17, 2026

Analyze CVE-2024-5805 with Vani AIImpact, affected versions, exploitation status, mitigations and detection

Description · NVD

Improper Authentication vulnerability in Progress MOVEit Gateway (SFTP modules) allows Authentication Bypass.This issue affects MOVEit Gateway: 2024.0.0.

Vendors: progress

Products: moveit gateway

Weakness: CWE-287

Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

NVD CVE.org GitHub PoCs EPSS (7.6%)

In the news

5 stories

Progress quietly fixes MOVEit auth bypass flaws (CVE-2024-5805, CVE-2024-5806)

Help Net SecurityJun 8, 10:33 UTC · Jun 8, 2026VulnerabilityExploitedCVE-2024-5805 CVE-2024-58064 · 2 reads

60

Exploit Attempts Recorded Against New MOVEit Transfer Vulnerability

The Hacker NewsJul 1, 05:51 UTC · Jul 1, 2024VulnerabilityExploitedCVE-2024-5806 CVE-2024-5805 CVE-2023-34362+31 · 1 read

60

Week in review: MOVEit auth bypass flaws quitely fixed, open-source Rafel RAT targets Androids

Help Net SecurityJun 30, 00:00 UTC · Jun 30, 2024MalwareCVE-2024-5805 CVE-2024-5806 CVE-2024-52762 · 1 read

60

New MOVEit Transfer critical bug is actively exploited

Security AffairsJun 26, 19:54 UTC · Jun 26, 2024VulnerabilityExploitedCVE-2024-5805 CVE-2024-58062

60

Progress Discloses Two New Vulnerabilities in MOVEit Products

Infosecurity MagazineJun 26, 17:15 UTC · Jun 26, 2024VulnerabilityExploitedCVE-2024-5806 CVE-2024-58052 · 1 read

60