Description

Path equivalence: vulnerability in Progress MOVEit Transfer (File Upload modules). This issue affects MOVEit Transfer: before 2025.0.8, from 2025.1.0 before 2025.1.4.

Remediation

References

CVE-2026-8801

Related Vulnerabilities

WordPress Plugin WordPress Infinite Scroll-Ajax Load More Arbitrary File Upload (2.8.1.1)

WordPress Plugin Preview E-mails for WooCommerce Cross-Site Scripting (1.6.8)

Joomla! Core 3.0.x Denial of Service (3.0.0 - 3.0.3)

WordPress Plugin Customer Reviews for WooCommerce Local File Inclusion (5.15.0)

Apache HTTP Server Improper Locking Vulnerability (CVE-2004-0174)

Severity

Critical

Classification

CVE-2026-8801 CWE-46 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Tags

Missing Update Known Vulnerabilities