CVE-2026-8650

A relative path traversal vulnerability exists in the Admin Settings module of Progress MOVEit Transfer, impacting versions prior to 2025.0.7 and from 2025.1.0 before 2025.1.3. This flaw could allow an attacker to access restricted files on the server, potentially leading to unauthorized data exposure. Organizations using affected versions should prioritize patching to mitigate the risk of exploitation.