7.5
CVE-2026-10699
- EPSS 0.28%
- Veröffentlicht 08.07.2026 14:18:00
- Zuletzt bearbeitet 10.07.2026 14:25:58
- Quelle security@progress.com
- CVE-Watchlists
- Unerledigt
Memory leak in SFTP service can result in a denial of service in MOVEit Transfer
Missing release of memory after effective lifetime vulnerability in Progress MOVEit Transfer (Custom Reports modules). This issue affects MOVEit Transfer: from 2025.0.0 before 2025.0.8, from 2025.1.0 before 2025.1.4, from 2026.0.0 before 2026.0.1.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Progress ≫ Moveit Transfer Version <= 2024.1.8
Progress ≫ Moveit Transfer Version >= 2025.0.0 < 2025.0.8
Progress ≫ Moveit Transfer Version >= 2025.1.0 < 2025.1.4
Progress ≫ Moveit Transfer Version2026.0.0
VulnDex Vulnerability Enrichment
Diese Information steht angemeldeten Benutzern zur Verfügung. 
Login
Login| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 0.28% | 0.201 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| security@progress.com | 7.5 | 3.9 | 3.6 |
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
|
CWE-401 Missing Release of Memory after Effective Lifetime
The product does not sufficiently track and release allocated memory after it has been used, making the memory unavailable for reallocation and reuse.
https://community.progress.com/s/article/MOVEit-Transfer-Critical-Security-Bulletin-June-2026