CVE-2026-8488 - Allocation of resources without limits or throttling vulnerability in Progress Software MOVEit Automation

Back Back to CVE browser

HIGH

Allocation of resources without limits or throttling vulnerability in Progress Software MOVEit Automation

Published May 20, 2026

7.5

HIGH

CVSS 3.1

EPSS 0.45%

Description

Allocation of resources without limits or throttling vulnerability in Progress Software MOVEit Automation allows Excessive Allocation.

This issue affects MOVEit Automation: before 2025.0.11, from 2025.1.0 before 2025.1.7.

Affected products

Vendor Progress Software Product MOVEit Automation Default
unaffected
- Version
  0
  Status
  affected
  Constraints
  <2025.0.11
- Version
  2025.1.0
  Status
  affected
  Constraints
  <2025.1.7

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

Progress Software

MOVEit Automation

unaffected

Version	Status	Constraints
0	affected	<2025.0.11
2025.1.0	affected	<2025.1.7

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-770

Allocation of Resources Without Limits

References (1)

https://docs.progress.com/bundle/moveit-automation-release-notes-2026/page/Fixed-Issues-2026.html
vendor-advisoryRelease Notes

Link	Providers	Tags
https://docs.progress.com/bundle/moveit-automation-release-notes-2026/page/Fixed-Issues-2026.html		vendor-advisoryRelease Notes

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner ProgressSoftware

Published May 20, 2026

Updated May 20, 2026

Reserved May 13, 2026

Link CVE-2026-8488

CISA Vulnrichment

Updated May 20, 2026

NVD

Status Analyzed

Modified Jul 23, 2026

Link CVE-2026-8488

Red Hat

Severity n/a

Public date n/a

Links CVE-2026-8488