RansomwarecriticalExploited in the wild

MOVEit automation flaws could enable full system compromise

Security Affairsby @securityaffairsMay 4, 2026 · 21:32 UTC (May 4, 2026)2 min read1 · 1 read

Read at securityaffairs.com

Analyze this story with Vani AIImpact, who is affected and what defenders should do, in a new chat

CVEs: CVE-2026-4670 CVE-2026-5174 CVE-2023-34362

Tags: cve-2023-34362 cve-2026-4670 cve-2026-5174 ransomware

Vulnerabilities mentioned

All

CVE	Vulnerability	CVSS	EPSS	Signals	Published
CVE-2023-34362	Unauthenticated SQL Injection in Progress MOVEit Transfer	9.8	100%	KEVRansomwarePoC	Jun 2, 2023 KEV Jun 2, 2023
CVE-2026-4670 +1 related CVE CVE-2026-5174	Authentication bypass by primary weakness vulnerability in Progress Software MOVEit Automation allows Authentication Bypass	9.8 group max	6%		Apr 30, 2026

From the original article

2 min read at securityaffairs.com

Progress fixes critical MOVEit Automation flaws, including an authentication bypass bug that could let attackers gain unauthorized access to systems. Progress Software addressed two vulnerabilities in MOVEit Automation, a critical authentication bypass flaw tracked as CVE-2026-4670 and a privilege escalation issue tracked as CVE-2026-5174.

Security Affairs

By @securityaffairs · securityaffairs.com

Read the full article at Security Affairs

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.