Warning: Critical authentication bypass in MOVEit Automation (CVE-2026-4670), Patch Immediately!

Progress MOVEit Automation is affected by two vulnerabilities—a critical authentication bypass (CVE-2026-4670, CVSS 9.8) and a high-severity improper input validation leading to privilege escalation (CVE-2026-5174, CVSS 7.7)—impacting multiple product branches; the Centre for Cybersecurity Belgium and the vendor recommend immediate patching to specified versions (MOVEit Automation 2025.1.5 / 2025.0.9 / 2024.1.8 or later) and increased monitoring, noting no confirmed active exploitation but elevated risk due to historical targeting of managed file transfer solutions.