TLDR Tech / InfoSec
Progress warns of critical MOVEit Automation auth bypass flaw
CVE-2026-4670 is a critical authentication bypass in MOVEit Automation affecting versions before 2025.1.5, 2025.0.9, and 2024.1.8. This vulnerability is exploitable remotely without privileges or user interaction, alongside a high-severity privilege escalation flaw, CVE-2026-5174. PwnDefend's Daniel Card identified over 1,400 internet-exposed MOVEit Automation instances via Shodan, including more than a dozen linked to US state and local government agencies. Given Clop's history of mass-exploiting MFT platforms such as Accellion FTA, SolarWinds Serv-U, GoAnywhere, Cleo, and the 2023 MOVEit Transfer campaign that affected more than 2,100 organizations, defenders should immediately apply the full installer upgrade and audit exposure.
Read the full story