7.5
CVE-2026-8486
- EPSS 0.4%
- Veröffentlicht 20.05.2026 14:11:30
- Zuletzt bearbeitet 21.05.2026 18:54:37
- Quelle security@progress.com
- CVE-Watchlists
- Unerledigt
Allocation of resources without limits or throttling vulnerability in Progress Software MOVEit Automation
Allocation of resources without limits or throttling vulnerability in Progress Software MOVEit Automation allows Flooding. This issue affects MOVEit Automation: before 2025.0.11, from 2025.1.0 before 2025.1.7.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Progress ≫ Moveit Automation Version < 2025.0.11
Progress ≫ Moveit Automation Version >= 2025.1.0 < 2025.1.7
VulnDex Vulnerability Enrichment
Diese Information steht angemeldeten Benutzern zur Verfügung. 
Login
Login| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 0.4% | 0.311 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| nvd@nist.gov | 7.5 | 3.9 | 3.6 |
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
|
| security@progress.com | 5.3 | 3.9 | 1.4 |
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
|
CWE-770 Allocation of Resources Without Limits or Throttling
The product allocates a reusable resource or group of resources on behalf of an actor without imposing any intended restrictions on the size or number of resources that can be allocated.
https://docs.progress.com/bundle/moveit-automation-release-notes-2026/page/Fixed-Issues-2026.html