---
title: "CVE-2024-5806: MOVEit Transfer Authentication Bypass Vulnerability"
url: https://erroneo.us/security/cve/CVE-2024-5806/
description: "CVE-2024-5806 (Progress MOVEit Transfer): Improper Authentication vulnerability in Progress MOVEit Transfer (SFTP module) can lead to Authentication…"
type: vulnerability-record
section: "Security Digest"
date_published: 2024-06-25
date_modified: 2026-10-21
publisher: erroneo.us
author: erroneo.us Security Desk
cve: "CVE-2024-5806"
kev: false
cvss: 9.1
epss: 0.81474
license: All rights reserved. Quote with attribution and a link.
---

# CVE-2024-5806: MOVEit Transfer Authentication Bypass Vulnerability

**Signal:** High exploit likelihood. EPSS ranks it in the top 5% of all CVEs for likely exploitation in the next 30 days. (Computed from CISA KEV, EPSS and CVSS; not an editorial verdict.)

## Should you act?

- Not in CISA KEV , but CISA’s SSVC assessment records a public proof-of-concept, so attack code exists.
- EPSS 81.5% , percentile 99.6: FIRST’s model estimates a 81.5% chance of exploitation activity in the next 30 days, higher than 99.6% of all scored CVEs (very high). EPSS is a probability, not a verdict.
- Remotely reachable with no login and no user interaction. If the vulnerable service is exposed to the internet, prioritize it.
- Editorial verdict: Act now. MOVEit Transfer: SFTP Authentication Bypass (CVE-2024-5806) — If you run MOVEit Transfer with SFTP exposed and are not on a fixed build, treat it as urgent: exploit details went public on disclosure day and attempts followed within hours.

## What it is

Improper Authentication vulnerability in Progress MOVEit Transfer (SFTP module) can lead to Authentication Bypass.This issue affects MOVEit Transfer: from 2023.0.0 before 2023.0.11, from 2023.1.0 before 2023.1.6, from 2024.0.0 before 2024.0.2.

## Affected products (CVE record)

- Progress MOVEit Transfer: 2023.0.0 < 2023.0.11, 2023.1.0 < 2023.1.6, 2024.0.0 < 2024.0.2

## Severity

- ProgressSoftware CVSS 3.1: 9.1 `CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N`

## Exploitation

- CISA KEV: not listed (no confirmed in-the-wild exploitation known to CISA).
- CISA SSVC assessment: exploitation poc , automatable no , technical impact total .
- FIRST EPSS (model of 2026-10-21): 81.47% probability of exploitation activity in the next 30 days; percentile 99.6.

## Sources

- [community.progress.com](https://community.progress.com/s/article/MOVEit-Transfer-Product-Security-Alert-Bulletin-June-2024-CVE-2024-5806)
- [CVE.org record CVE-2024-5806](https://www.cve.org/CVERecord?id=CVE-2024-5806)
- [NVD entry CVE-2024-5806](https://nvd.nist.gov/vuln/detail/CVE-2024-5806)
- [progress.com](https://www.progress.com/moveit)

---
Source page: https://erroneo.us/security/cve/CVE-2024-5806/ · Security Digest: https://erroneo.us/security/ · More: https://erroneo.us/llms.txt