SEC.co
Emergency

By weakness (CWE)

CWE-46: related vulnerabilities

CVEs classified under CWE-46. Understanding the weakness class helps prioritize systemic fixes over one-off patches.

1 published vulnerability

Known exploited (KEV)CriticalHighMediumAll recent
  • CVE-2026-8801LOW 3.5

    Progress MOVEit Transfer contains a path equivalence vulnerability in its file upload modules that could allow an authenticated user with limited privileges to modify files in unexpected ways. The vulnerability affects versions before 2025.0.8 and versions 2025.1.0 through 2025.1.3. While the technical impact is limited to file integrity (no data theft or availability loss), the issue highlights a logic flaw in how the application validates file paths during upload operations.