Signal

Critical authentication bypass vulnerability fixed in MOVEit Automation (CVE-2026-4670)

Evidence first: scan the strongest sources, then decide whether to go deeper.

Published 2026-05-04 12:18 UTCUpdated 2026-05-04 15:08 UTC
rss
cvevulnerabilitysecurity_advisoriesincident_response
Promoted linkSource links open
Source links and full evidence are open here. Pro adds archive history, compare-over-time, alerts, exports, and workflow. Business adds Feed API integrations and team usage.
BackToday's BriefEvidence (3)Get the free brief by emailStart free trial
No card needed for the free brief.
Evidence trail (top sources)
top sources (3 domains)domains are deduped. counts indicate coverage, not truth.
3 top sources shown
View all evidence
Overview

Progress Software has addressed a critical authentication bypass vulnerability (CVE-2026-4670) and a related privilege escalation flaw (CVE-2026-5174) in its MOVEit Automation managed file transfer application.

Entities
Progress SoftwareAirbusMOVEit Automation
Why now
  • The vulnerability was recently disclosed and patched, requiring immediate attention from users.
  • No known exploitation in the wild yet, but the risk remains high if unpatched.
  • Security advisories from multiple trusted sources urge immediate remediation.
Why it matters
  • The vulnerability allows attackers to bypass authentication, risking unauthorized access and data exposure.
  • MOVEit Automation is widely used in enterprise managed file transfer, making the flaw impactful.
  • Prompt patching is critical to prevent potential exploitation and maintain system security.
Evidence assessment
Recurring claims
  • MOVEit Automation contains a critical authentication bypass vulnerability (CVE-2026-4670) that can lead to unauthorized access and administrative control.
How sources frame it
  • Help Net Security: neutral
  • BleepingComputer: neutral
  • CERT Belgium: neutral
All evidence
All evidence
Help Net Security - Critical MOVEit Automation auth bypass vulnerability fixed
helpnetsecurity.com · helpnetsecurity.com · 2026-05-04 14:58 UTC
Progress warns of critical MOVEit Automation auth bypass flaw
BleepingComputer · bleepingcomputer.com · 2026-05-04 12:18 UTC
Warning: Critical authentication bypass in MOVEit Automation (CVE-2026-4670), Patch Immediately!
Belgium (via CERT.BE (BE) - Advisories) · ccb.belgium.be · 2026-05-04 15:08 UTC
Show filters & breakdown
Evidence items loaded: 0Publishers: 3Origin domains: 3Duplicates: -
Showing 3 / 3