Security Advisory
CVE-2026-8649
6.4
MEDIUM
Vulnerability Description
Improper Neutralization of Special Elements in Data Query Logic vulnerability in Progress MOVEit Transfer (Custom Reports modules).
This issue affects MOVEit Transfer: before 2025.0.7, from 2025.1.0 before 2025.1.3.
Published Date
July 8, 2026
Official Source
NIST NVD Advisory