CVE Catalog
CVE-2026-8486
MediumCVSS 5.3Exploitation Probability (EPSS)
Low risk0.40%
32th percentile - higher than 32% of all known CVEs
Summary
Resource allocation without limits or throttling vulnerability in Progress Software MOVEit Automation allows flooding attacks. Affects versions before 2025.0.11 and from 2025.1.0 before 2025.1.7.
Risk Assessment
An attacker can overwhelm the system, causing denial of service of MOVEit Automation, potentially disrupting organizational operations.
Recommendation
Immediately update MOVEit Automation to version 2025.0.11 or 2025.1.7.
Original NVD description (English source)
Allocation of resources without limits or throttling vulnerability in Progress Software MOVEit Automation allows Flooding. This issue affects MOVEit Automation: before 2025.0.11, from 2025.1.0 before 2025.1.7.