CVE-2026-89070— MOVEit Transfer OIDC Authentication Replay Vulnerability
Quick assessment
Affected
Progress MOVEit Transfer
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.
中文翻译： 在 Progress MOVEit Transfer（OIDC 模块）中，存在一个通过捕获重放绕过身份验证的漏洞。 此问题影响以下版本的 MOVEit Transfer： 2025.1.6 之前的所有版本 2026.0.0 至 2026.0.4 之前的所有版本 漏洞影响说明： 攻击者可以通过捕获并重放有效的身份验证请求，绕过系统的身份验证机制，从而未经授权访问受保护的资源或执行敏感操作。建议尽快升级到受影响版本之后的修复版本以缓解此风险。
Affected Version Matrix 2
| Vendor | Product | Version Range | Status |
|---|---|---|---|
| Progress | MOVEit Transfer | < 2025.1.6 |
affected |
2026.0.0< 2026.0.4 |
affected |
Get alerts for future matching vulnerabilities
Log in to subscribe
I. Basic Information for CVE-2026-89070
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
MOVEit Transfer OIDC Authentication Replay Vulnerability
Source: CVE Program / CVE List V5
Vulnerability Description
Authentication bypass by capture-replay vulnerability in Progress MOVEit Transfer (OIDC module).
This issue affects MOVEit Transfer: before 2025.1.6 and from 2026.0.0 before 2026.0.4.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
Source: CVE Program / CVE List V5
Vulnerability Type
使用捕获-重放进行的认证绕过
Source: CVE Program / CVE List V5
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| Progress | MOVEit Transfer | 0 ~ 2025.1.6 | - |
|
II. Public POCs for CVE-2026-89070
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POC
Premium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2026-89070
请登录查看更多情报信息。
Same Patch Batch · Progress · 2026-10-14 · 12 CVEs total
| CVE-2026-89067 | 8.8 HIGH | MOVEit Transfer Secure Messaging Authentication Bypass |
| CVE-2026-87093 | 8.8 HIGH | MOVEit Transfer Service Directory Writable by Local Users Enables Local Privilege Escalati |
| CVE-2026-89068 | 8.1 HIGH | MOVEit Transfer Authentication bypass in LDAP sign-on |
| CVE-2026-89069 | 8.0 HIGH | MOVEit Transfer Stored XSS Vulnerability in Ad Hoc Packages |
| CVE-2026-89073 | 7.5 HIGH | MOVEit Transfer Access restriction bypass in OAuth authentication |
| CVE-2026-89077 | 7.5 HIGH | MOVEit Transfer Identity validation flaw in SFTP authentication |
| CVE-2026-89074 | 7.5 HIGH | MOVEit Transfer Email MFA Bypass |
| CVE-2026-89072 | 7.5 HIGH | MOVEit Transfer Authorization Flaw in Certificate Management |
| CVE-2026-89071 | 7.5 HIGH | MOVEit Transfer LDAP injection in certificate-based authentication |
| CVE-2026-89075 | 7.3 HIGH | MOVEit Transfer Local Disclosure of Session Information Vulnerability |
| CVE-2026-89076 | 7.2 HIGH | MOVEit Transfer SQL injection in custom reporting |
IV. Related Vulnerabilities
Same product: MOVEit Transfer
-
CVE-2026-89077
MOVEit Transfer Identity validation flaw in SFTP authenticat -
CVE-2026-89076
MOVEit Transfer SQL injection in custom reporting -
CVE-2026-89075
MOVEit Transfer Local Disclosure of Session Information Vuln -
CVE-2026-89074
MOVEit Transfer Email MFA Bypass -
CVE-2026-89073
MOVEit Transfer Access restriction bypass in OAuth authentic
Same vendor: Progress
-
CVE-2026-89077
MOVEit Transfer Identity validation flaw in SFTP authenticat -
CVE-2026-89076
MOVEit Transfer SQL injection in custom reporting -
CVE-2026-89075
MOVEit Transfer Local Disclosure of Session Information Vuln -
CVE-2026-89074
MOVEit Transfer Email MFA Bypass -
CVE-2026-89073
MOVEit Transfer Access restriction bypass in OAuth authentic
Same weakness: CWE-294
V. Comments for CVE-2026-89070
No comments yet