New 2024 MOVEit Transfer Vulnerability: What We Know So Far

ReliaQuest advisory (June 25, 2024) describes CVE-2024-5806, a high-severity improper-authentication vulnerability in MOVEit Transfer’s SFTP module that can allow attackers to bypass authentication and access, modify, or delete files. A proof-of-concept exists and researchers report active exploitation in the wild; the advisory urges immediate patching, restricting network access, and monitoring for IOCs due to the risk of data exfiltration and extortion similar to prior Cl0p incidents.