Progress security advisory (AV26-1058)
Canada’s Cyber Centre urges updates for critical MOVEit Transfer flaws fixed in 2025.1.6 and 2026.0.4.
On October 16, 2026, the Canadian Centre for Cyber Security issued advisory AV26-1058 on vulnerabilities in Progress MOVEit Transfer. Versions before 2025.1.6 and before 2026.0.4 are affected, based on Progress information current as of October 14. The notice points to Progress’s September 2026 MOVEit Transfer Critical Security Bulletin and tells administrators to review the links and apply updates. No CVE identifiers or statements of active exploitation are included.
- Canadian advisory AV26-1058 covers Progress MOVEit Transfer.
- Builds before 2025.1.6 and 2026.0.4 are affected.
- Progress calls its September 2026 bulletin critical.
- The notice gives no CVE IDs or exploitation status.
- Countries
- Canada
Coverage
oldest first · one row per article · UTC- · 10d ago
Canadian Centre for Cyber SecurityFirst report
[Control systems] Schneider Electric security advisory (AV26-1051)
Canada’s Cyber Centre warns of a data-authenticity flaw in Schneider Electric Sage RTU controllers.
- · 10d ago
[Control systems] Johnson Controls security advisory (AV26-1052)
Canadian Cyber Centre flags a Johnson Controls flaw in American Dynamics ADVMS before version 3.10.
Vulnerabilities in this story
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
CVE-2026-109813+1 related CVE | Hard-coded key in Moxa sysman (adjacent network) | 8.6 group max | — |