high7.2
CVE-2026-10698
Improper Neutralization of Special Elements in Data Query Logic vulnerability in Progress MOVEit Transfer (Custom Reports modules).
Impact
Improper Neutralization of Special Elements in Data Query Logic vulnerability in Progress MOVEit Transfer (Custom Reports modules). This issue affects MOVEit Transfer: from 2025.0.0 before 2025.0.8, from 2025.1.0 before 2025.1.4, from 2026.0.0 before 2026.0.1.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Progress | Moveit Transfer | through 2024.1.8 from 2025.0.0 before 2025.0.8 from 2025.1.0 before 2025.1.4 Version 2026.0.0 |