This vulnerability (CVE-2026-10697) in Progress MOVEit Transfer involves improper authentication (CWE-287), which could allow an attacker to bypass authentication mechanisms. The affected versions include all releases before 2025.1.5 and versions starting at 2026.0.0 but prior to 2026.0.3. The CVSS 3.1 base score is 7.5, indicating a high severity with network attack vector requiring high attack complexity and no privileges or user interaction needed. The impact includes high confidentiality, integrity, and availability impacts. No vendor advisory or patch information is currently available, and no known exploits have been reported.

Successful exploitation could lead to unauthorized access to MOVEit Transfer systems, potentially compromising confidentiality, integrity, and availability of data managed by the software. The vulnerability allows bypassing authentication controls, which could enable attackers to perform unauthorized actions within the affected system.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, organizations should monitor vendor communications closely and apply updates as soon as they become available. No specific temporary mitigations are provided in the current data.