MOVEit Automation Alert: Critical Authentication Bypass Hits CVSS 9.8

Progress Software issued an urgent advisory for MOVEit Automation describing two vulnerabilities that could allow administrative takeover: CVE-2026-4670 (critical authentication bypass, CVSS 9.8) and CVE-2026-5174 (privilege escalation, CVSS 7.7). The flaws affect multiple releases (including versions prior to 2024.0.0); administrators are instructed to verify versions, apply the full-installer patches (which may require scheduled downtime), and monitor audit logs for unauthorized access or privilege escalations.