CVE-2026-8486: Allocation of resources without limits or throttling vulnerability in Progress Software MOVEit Automation
Allocation of resources without limits or throttling vulnerability in Progress Software MOVEit Automation allows Flooding.
This issue affects MOVEit Automation: before 2025.0.11, from 2025.1.0 before 2025.1.7.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
Progress Software MOVEit Automationto a version that resolves this vulnerability.Fixed in 2025.0.11 - Upgrade
Upgrade
Progress Software MOVEit Automationto a version that resolves this vulnerability.Fixed in 2025.1.7
Event History
Frequently Asked Questions
What is the severity of CVE-2026-8486?
CVE-2026-8486 is considered critical due to the potential for resource flooding that can lead to denial of service.
How do I fix CVE-2026-8486?
To mitigate CVE-2026-8486, upgrade your Progress Software MOVEit Automation to version 2025.1.7 or later.
What products are affected by CVE-2026-8486?
CVE-2026-8486 affects Progress Software MOVEit Automation versions before 2025.0.11 and between 2025.1.0 to 2025.1.6.
What type of vulnerability is CVE-2026-8486?
CVE-2026-8486 is an allocation of resources without limits or throttling vulnerability.
Is there a known exploit for CVE-2026-8486?
As of now, there are no publicly disclosed exploits for CVE-2026-8486, but the vulnerability poses significant risk.