CVE-2026-8801

Low · 3.5

CVSS

3.5

EPSS

—

Published

Jul 8, 2026

CISA due date

—

The record

Path equivalence: vulnerability in Progress MOVEit Transfer (File Upload modules). This issue affects MOVEit Transfer: before 2025.0.8, from 2025.1.0 before 2025.1.4.

Affected packages

Ecosystem	Package	Introduced	Fixed