high7.5
CVE-2026-10699
Missing release of memory after effective lifetime vulnerability in Progress MOVEit Transfer (Custom Reports modules).
Impact
Missing release of memory after effective lifetime vulnerability in Progress MOVEit Transfer (Custom Reports modules). This issue affects MOVEit Transfer: from 2025.0.0 before 2025.0.8, from 2025.1.0 before 2025.1.4, from 2026.0.0 before 2026.0.1.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Progress | Moveit Transfer | through 2024.1.8 from 2025.0.0 before 2025.0.8 from 2025.1.0 before 2025.1.4 Version 2026.0.0 |