Web Application Vulnerabilities Runtime SCA Findings
Looking for the vulnerability index of Invicti's legacy products?
Invicti Enterprise Acunetix Standard & Premium
MOVEit Transfer Permissive Cross-domain Policy with Untrusted Domains Vulnerability - CVE-2026-15966 - Vulnerability Database
MOVEit Transfer

MOVEit Transfer Permissive Cross-domain Policy with Untrusted Domains Vulnerability - CVE-2026-15966

Critical
Reference: CVE-2026-15966
NVD Link: https://nvd.nist.gov/vuln/detail/CVE-2026-15966
Title: MOVEit Transfer Permissive Cross-domain Policy with Untrusted Domains Vulnerability
Overview:

Permissive cross-domain security policy with untrusted domains vulnerability in Progress MOVEit Transfer. This issue affects MOVEit Transfer: before 2025.1.5 from 2026.0.0 before 2026.0.3.