Progress security advisory (AV26-1058)
Canada’s Cyber Centre urges updates for critical MOVEit Transfer flaws fixed in 2025.1.6 and 2026.0.4.
On October 16, 2026, the Canadian Centre for Cyber Security issued advisory AV26-1058 on vulnerabilities in Progress MOVEit Transfer. Versions before 2025.1.6 and before 2026.0.4 are affected, based on Progress information current as of October 14. The notice points to Progress’s September 2026 MOVEit Transfer Critical Security Bulletin and tells administrators to review the links and apply updates. No CVE identifiers or statements of active exploitation are included.
- Canadian advisory AV26-1058 covers Progress MOVEit Transfer.
- Builds before 2025.1.6 and 2026.0.4 are affected.
- Progress calls its September 2026 bulletin critical.
- The notice gives no CVE IDs or exploitation status.
Full article62 words · extracted from cyber.gc.ca · click to collapse
Serial Number: AV26-1058
Date: October 16, 2026
As of October 14, 2026, Progress is affected by vulnerabilities in the following product:
- MOVEit Transfer
- Prior to 2025.1.6
- Prior to 2026.0.4
The Cyber Centre encourages users and administrators to review the provided web links and apply any necessary updates as they become available.
Text extracted automatically; images, tables and formatting may be missing. Original: https://cyber.gc.ca/en/alerts-advisories/progress-security-advisory-av26-1058