CVE-2026-8488

MediumCVSS 4.3

Published: 20/05/2026(UTC)Updated: 23/07/2026(UTC)Translated: 25/07/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.36%

29th percentile - higher than 29% of all known CVEs

Summary

Progress Software MOVEit Automation has a resource allocation vulnerability without limits or throttling, leading to excessive allocation. This affects versions before 2025.0.11 and from 2025.1.0 before 2025.1.7.

Risk Assessment

The risk is that an attacker could exhaust system resources, potentially causing a denial of service (DoS).

Recommendation

Update MOVEit Automation to version 2025.0.11 or later (for the 2025.0 branch) and to 2025.1.7 or later (for the 2025.1 branch).

Original NVD description (English source)

Allocation of resources without limits or throttling vulnerability in Progress Software MOVEit Automation allows Excessive Allocation. This issue affects MOVEit Automation: before 2025.0.11, from 2025.1.0 before 2025.1.7.