CVE-2026-87093 Progress CVE debrief

Who should care

System administrators and security teams responsible for MOVEit Transfer installations should assess exposure and apply patches to prevent potential local privilege escalation attacks.

Why it matters

CVE-2026-87093 is a high-severity vulnerability in Progress MOVEit Transfer that allows local privilege escalation. Defenders should verify exposure, apply patches, and monitor for potential attacks.

• Local privilege escalation is possible due to incorrect permissions.
• Affected versions require immediate patching to prevent exploitation.
• Defenders should verify exposure and apply vendor patches promptly.
• Inventory checks and monitoring are necessary to detect potential attacks.

Technical summary

The vulnerability in Progress MOVEit Transfer allows local users to escalate privileges due to incorrect permission assignments. This issue affects MOVEit Transfer versions before 2025.1.6 and from 2026.0.0 before 2026.0.4. The vulnerability has a high CVSS score of 8.8, indicating a high severity. Defenders should prioritize verifying exposure and applying vendor patches due to the potential for local privilege escalation.

Defensive priority

Defenders should prioritize verifying exposure and applying vendor patches due to the high CVSS score of 8.8 and potential for local privilege escalation.

Recommended defensive actions

• Verify exposure by checking installed MOVEit Transfer versions against affected ranges.
• Apply vendor patches to update to version 2025.1.6 or later, or 2026.0.4 or later.
• Monitor for potential local privilege escalation attempts.
• Review and update access controls for MOVEit Transfer services.

Evidence notes

The CVE Program and NVD records provide details on the vulnerability, including its high CVSS score of 8.8 and affected versions. The vulnerability affects MOVEit Transfer versions before 2025.1.6 and from 2026.0.0 before 2026.0.4. Defenders should verify exposure and apply vendor patches promptly. Inventory checks and monitoring are necessary to detect potential attacks. The evidence is based on CVE Program and NVD records, which provide a comprehensive overview of the vulnerability.

Sources and references

Methodology and review provenance

AI-assisted synthesis based on stored public vulnerability evidence. System validation, approval state, and publication status do not by themselves establish human review of this revision. PatchSiren helps prioritize defensive review and does not prove exposure or remediation on any system.