Vulnerabilities
Vulnerable Software

Vulnerability Details CVE-2026-89076

Improper neutralization of special elements used in an SQL command ('SQL injection') vulnerability in Progress MOVEit Transfer (Custom Reports module). This issue affects MOVEit Transfer: before 2025.1.6 and from 2026.0.0 before 2026.0.4.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.005
EPSS Ranking 40.8%
CVSS Severity
CVSS v3 Score 7.2
Products affected by CVE-2026-89076


Contact Us

Shodan ® - All rights reserved