CVE-2026-10698CWE-943

Table scope bypass vulnerability in custom reports

High · published July 8, 2026

CVSS v3.1
7.2
EPSS
1%
Percentile
50.2
In the wild
Unconfirmed
What it is

Improper Neutralization of Special Elements in Data Query Logic vulnerability in Progress MOVEit Transfer (Custom Reports modules).

This issue affects MOVEit Transfer: from 2025.0.0 before 2025.0.8, from 2025.1.0 before 2025.1.4, from 2026.0.0 before 2026.0.1.

The record
Technical detail
CVSS v3.1
7.2 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00644 · 50.2th percentile
Weakness
CWE-943 · Improper Neutralization of Special Elements in Data Query Logic
Published
2026-07-08T14:16Z
EPSS history
Timeline
  • 08 JUL 14:16Z
    Table scope bypass vulnerability in custom reports
    cvelistv5