CVE-2024-5805

—

CVSS 3.1

9.1 critical

EPSS

8%p94

Published

Jun 25, 2024 (Jun 25, 2024)

Modified

Jun 17, 2026

Description

Improper Authentication vulnerability in Progress MOVEit Gateway (SFTP modules) allows Authentication Bypass.This issue affects MOVEit Gateway: 2024.0.0.

Vendors: progress
Products: moveit gateway
Weakness: CWE-287
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

NVD CVE.org GitHub PoCs EPSS (7.6%)

In the news5 stories

Progress quietly fixes MOVEit auth bypass flaws (CVE-2024-5805, CVE-2024-5806)

Help Net SecurityJun 8, 10:33 UTC · Jun 8, 2026Vulnerability in the wildCVE-2024-5805 CVE-2024-5806

Exploit Attempts Recorded Against New MOVEit Transfer Vulnerability

The Hacker NewsJul 1, 05:51 UTC · Jul 1, 2024Vulnerability in the wildCVE-2024-5806 CVE-2024-5805 CVE-2023-34362+3 CVEs

Week in review: MOVEit auth bypass flaws quitely fixed, open-source Rafel RAT targets Androids

Help Net SecurityJun 30, 00:00 UTC · Jun 30, 2024Malware CVE-2024-5805 CVE-2024-5806 CVE-2024-5276

New MOVEit Transfer critical bug is actively exploited

Security AffairsJun 26, 19:54 UTC · Jun 26, 2024Vulnerability in the wildCVE-2024-5805 CVE-2024-5806

Progress Discloses Two New Vulnerabilities in MOVEit Products

Infosecurity MagazineJun 26, 17:15 UTC · Jun 26, 2024Vulnerability in the wildCVE-2024-5806 CVE-2024-5805