Skip to main content
Threat Radar animated logo

Threat Intelligence Database

Comprehensive database of the latest cyber threats affecting organizations worldwide. Filter and search to find specific threat intelligence relevant to your organization.

Pro Console Lifetime

Stop chasing alerts. Route them.

Start free, then upgrade once to turn Radar into an automated delivery engine for your security stack.

Custom feeds / Automations: email, Slack, webhooks, SIEM/MISP / API access (baseline limits)

View Plans & Pricing

API access activates after upgrading in Console -> Billing.

Breach by OffSeqOFFSEQFRIENDS — 25% OFF

Check if your credentials are on the dark web

Instant breach scanning across billions of leaked records. Free tier available.

Scan now

Filter Threats

Narrow down the results by type, severity, or affected countries

Search threats by title, CVE ID, or description. Maximum 100 characters.
Active filters (1):Package: pkg:maven/com.ipswitch/moveit-transfer

Threat Intelligence

Click on any threat for detailed analysis and mitigation recommendations

Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in Progress MOVEit Transfer. (CVE-2026-15968)CVE-2026-15968
0

CVE-2026-15968 is a cross-site scripting (XSS) vulnerability in Progress MOVEit Transfer caused by improper neutralization of input during web page generation. This vulnerability affects MOVEit Transfer versions before 2025.1.5 and versions from 2026.0.0 up to but not including 2026.0.3. The vulnerability allows an attacker to inject malicious scripts that can lead to high impact on confidentiality, integrity, and availability. No known exploits in the wild have been reported. The vulnerability is rated as high severity based on CVSS 3.1 metrics.

HighVulnerability#gcve#osv#ghsa-hq56-w6jm-c6vp
Join the discussion
CVE-2026-15968: CWE-79 Improper neutralization of input during web page generation ('cross-site scripting') in Progress MOVEit TransferCVE-2026-15968
0

Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in Progress MOVEit Transfer. This issue affects MOVEit Transfer: before 2025.1.5, from 2026.0.0 before 2026.0.3.

HighVulnerability#cve#cve-2026-15968#cwe-79
Join the discussion
CVE-2026-15967: CWE-613 Insufficient session expiration in Progress MOVEit TransferCVE-2026-15967
0

Insufficient session expiration vulnerability in Progress MOVEit Transfer. This issue affects MOVEit Transfer: before 2025.1.5, from 2026.0.0 before 2026.0.3.

HighVulnerability#cve#cve-2026-15967#cwe-613
Join the discussion
CVE-2026-15966: CWE-942 Permissive cross-domain security policy with untrusted domains in Progress MOVEit TransferCVE-2026-15966
0

Permissive cross-domain security policy with untrusted domains vulnerability in Progress MOVEit Transfer. This issue affects MOVEit Transfer: before 2025.1.5, from 2026.0.0 before 2026.0.3.

HighVulnerability#cve#cve-2026-15966#cwe-942
Join the discussion
CVE-2026-10697: CWE-287: Improper Authentication in Progress MOVEit TransferCVE-2026-10697
0

Improper Authentication vulnerability in Progress MOVEit Transfer. This issue affects MOVEit Transfer: before 2025.1.5, from 2026.0.0 before 2026.0.3.

HighVulnerability#cve#cve-2026-10697#cwe-287
Join the discussion
CVE-2026-8801: CWE-46 Path equivalence: 'filename ' (trailing space) in Progress MOVEit TransferCVE-2026-8801
0

Path equivalence: vulnerability in Progress MOVEit Transfer (File Upload modules). This issue affects MOVEit Transfer: before 2025.0.8, from 2025.1.0 before 2025.1.4.

LowVulnerability#cve#cve-2026-8801#cwe-46
Join the discussion
CVE-2026-8651: CWE-290 Authentication bypass by spoofing in Progress MOVEit TransferCVE-2026-8651
0

Limited authentication bypass by spoofing vulnerability in Progress MOVEit Transfer (HTTPS module). This issue affects MOVEit Transfer: before 2025.0.7, from 2025.1.0 before 2025.1.3.

LowVulnerability#cve#cve-2026-8651#cwe-290
Join the discussion
CVE-2026-8649: CWE-943 Improper Neutralization of Special Elements in Data Query Logic in Progress MOVEit TransferCVE-2026-8649
0

Improper Neutralization of Special Elements in Data Query Logic vulnerability in Progress MOVEit Transfer (Custom Reports modules). This issue affects MOVEit Transfer: before 2025.0.7, from 2025.1.0 before 2025.1.3.

MediumVulnerability#cve#cve-2026-8649#cwe-943
Join the discussion
CVE-2026-10698: CWE-943 Improper Neutralization of Special Elements in Data Query Logic in Progress MOVEit TransferCVE-2026-10698
0

Improper Neutralization of Special Elements in Data Query Logic vulnerability in Progress MOVEit Transfer (Custom Reports modules). This issue affects MOVEit Transfer: from 2025.0.0 before 2025.0.8, from 2025.1.0 before 2025.1.4, from 2026.0.0 before 2026.0.1.

HighVulnerability#cve#cve-2026-10698#cwe-943
Join the discussion
CVE-2025-10932: CWE-400 Uncontrolled Resource Consumption in Progress MOVEit TransferCVE-2025-10932
0

Uncontrolled Resource Consumption vulnerability in Progress MOVEit Transfer (AS2 module).This issue affects MOVEit Transfer: from 2025.0.0 before 2025.0.3, from 2024.1.0 before 2024.1.7, from 2023.1.0 before 2023.1.16.

HighVulnerabilityGermanyGermanyUnited KingdomUnited KingdomFranceFrance+4#cve#cve-2025-10932#cwe-400
Join the discussion

Showing 1 to 10 of 11 results

Filters:Package: pkg:maven/com.ipswitch/moveit-transfer
Page 1 of 2
OffSeq TrainingCredly Certified

Lead Pen Test Professional

Technical5-day eLearningPECB Accredited
View courses