CVE-2026-10698

—

CVSS 3.1

7.2 high

EPSS

<1%p49

Published

Jul 8, 2026 (Jul 8, 2026)

Modified

Jul 10, 2026

Description

Improper Neutralization of Special Elements in Data Query Logic vulnerability in Progress MOVEit Transfer (Custom Reports modules). This issue affects MOVEit Transfer: from 2025.0.0 before 2025.0.8, from 2025.1.0 before 2025.1.4, from 2026.0.0 before 2026.0.1.

Vendors: progress
Products: moveit transfer
Weakness: CWE-943
Vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (0.6%)

In the news0 stories

No ingested article mentions this CVE yet.