--- title: Critical MOVEit Transfer Vulnerability CVE-2024-5806... description: Critical vulnerabilities CVE-2024-5805 and CVE-2024-5806 in MOVEit Transfer and MOVEit Gateway are being actively exploited. Users should immediately apply... canonical: https://daily.dev/posts/critical-moveit-transfer-vulnerability-cve-2024-5806-under-active-exploitation---immediate-patch-req-xkz9myjq9 twitter:card: summary_large_image twitter:site: @dailydotdev og:type: website og:site_name: daily.dev og:title: Critical MOVEit Transfer Vulnerability CVE-2024-5806 Under Active Exploitation - Immediate Patch Required | daily.dev og:description: Critical vulnerabilities CVE-2024-5805 and CVE-2024-5806 in MOVEit Transfer and MOVEit Gateway are being actively exploited. Users should immediately apply... og:url: https://daily.dev/posts/critical-moveit-transfer-vulnerability-cve-2024-5806-under-active-exploitation---immediate-patch-req-xkz9myjq9 og:image: https://api.daily.dev/og/posts/Xkz9Myjq9.png og:image:alt: Critical MOVEit Transfer Vulnerability CVE-2024-5806 Under Active Exploitation - Immediate Patch Required og:image:width: 1200 og:image:height: 630 og:locale: en --- > ## Documentation Index > Fetch the complete documentation index at: https://daily.dev/llms.txt > Use this file to discover all available pages before exploring further. # Critical MOVEit Transfer Vulnerability CVE-2024-5806 Under Active Exploitation - Immediate Patch Required **[Collections](https://daily.dev/sources/collections)** · 2 min read · 2 upvotes · 0 comments ## Summary Critical vulnerabilities CVE-2024-5805 and CVE-2024-5806 in MOVEit Transfer and MOVEit Gateway are being actively exploited. Users should immediately apply patches released by Progress Software, restrict access, monitor traffic, and employ a layered security approach to mitigate risks. ## Content # Critical MOVEit Transfer Vulnerabilities Under Active Exploitation - Patch Immediately A series of critical and high-severity vulnerabilities (CVE-2024-5805 and CVE-2024-5806) have been discovered in Progress Software's MOVEit Transfer and MOVEit Gateway systems. These vulnerabilities are currently being actively exploited by malicious actors, making immediate action essential for all users. ## Vulnerability Details **CVE-2024-5806** is a severe authentication bypass issue impacting several versions of MOVEit Transfer. This flaw allows attackers to circumvent authentication protocols, potentially mimicking legitimate user access. The bug has been reported shortly after its disclosure, leading to immediate exploitation attempts. Additionally, **CVE-2024-5805** also affects MOVEit Transfer and MOVEit Gateway. This vulnerability is tied to critical issues within the systems’ authentication processes, posing significant security risks as well. ## Current Exploitation and Risks Cyber attackers are actively targeting these vulnerabilities, taking advantage of proof-of-concept exploits. Thousands of MOVEit Transfer instances exposed online are at dire risk, prompting an urgent need for security updates. To protect against these exploits, administrator intervention is critical. ## Recommended Actions 1. **Patch Immediately**: Progress Software has released patches to address these vulnerabilities. Users are strongly advised to upgrade to the latest fixed versions of MOVEit Transfer and MOVEit Gateway without delay. 2. **Restrict Access**: Restrict Remote Desktop Protocol (RDP) access and outbound traffic from affected servers as a precautionary measure to mitigate potential threats. 3. **Monitor Traffic**: Continuously monitor network traffic for unusual activities that may indicate attempts to exploit these vulnerabilities. 4. **Layered Security Approach**: Employ a layered security strategy to ensure comprehensive protection beyond the immediate patching efforts. ## Additional Concerns There is also a related third-party vulnerability in the IPWorks SSH library, which needs to be managed alongside the primary MOVEit Transfer and Gateway vulnerabilities. Furthermore, the Cybersecurity and Infrastructure Security Agency (CISA) has recently reported a breach of its Cybersecurity Sharing Advisory Tool (CSAT) due to other security vulnerabilities, emphasizing the broader ecosystem's vulnerabilities at play. ## Conclusion The vulnerabilities in MOVEit Transfer and MOVEit Gateway represent a severe security threat requiring immediate attention. The rapid pace of exploitation underscores the urgency for users to apply patches and additional defensive measures. With active exploitation already observed, swift and comprehensive actions are vital to ensure data integrity and security. Stay vigilant and ensure your systems are promptly updated to defend against these critical vulnerabilities. ## Similar posts on daily.dev - [Don’t just attend KubeCon \+ CloudNativeCon, Merge Forward your experience\!](https://daily.dev/posts/don-t-just-attend-kubecon-cloudnativecon-merge-forward-your-experience--l0rpp73x8) · CNCF · 1 upvotes · 0 comments - [Announcing H2 2026 KCDs](https://daily.dev/posts/announcing-h2-2026-kcds-m96goajm1) · CNCF · 1 upvotes · 0 comments - [Two months of Open Community Groups](https://daily.dev/posts/two-months-of-open-community-groups-asf52zhbs) · CNCF · 0 upvotes · 0 comments - [CNCF Unveils Schedule for KubeCon \+ CloudNativeCon Europe 2026](https://daily.dev/posts/cncf-unveils-schedule-for-kubecon-cloudnativecon-europe-2026-ikhcoa5cb) · CNCF · 2 upvotes · 0 comments - [CNCF Debuts KubeCon \+ CloudNativeCon Japan 2026 Schedule](https://daily.dev/posts/cncf-debuts-kubecon-cloudnativecon-japan-2026-schedule-xp5pyudub) · CNCF · 1 upvotes · 0 comments --- Tags: [#security](https://daily.dev/tags/security), [#cyber](https://daily.dev/tags/cyber), [#vulnerability](https://daily.dev/tags/vulnerability), [#data-protection](https://daily.dev/tags/data-protection) [View this post on daily.dev](https://daily.dev/posts/critical-moveit-transfer-vulnerability-cve-2024-5806-under-active-exploitation---immediate-patch-req-xkz9myjq9) ```json {"@context":"https://schema.org","@graph":[{"@type":"Organization","@id":"https://daily.dev/#organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180},"sameAs":["https://twitter.com/dailydotdev","https://github.com/dailydotdev","https://www.linkedin.com/company/daily-dev-ltd"]},{"@type":"WebSite","@id":"https://daily.dev/#website","url":"https://daily.dev","name":"daily.dev","publisher":{"@id":"https://daily.dev/#organization"},"potentialAction":{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https://daily.dev/search?q={search_term_string}"},"query-input":"required name=search_term_string"}}]} {"@context":"https://schema.org","@type":"TechArticle","headline":"Critical MOVEit Transfer Vulnerability CVE-2024-5806 Under Active Exploitation - Immediate Patch Required","url":"https://daily.dev/posts/critical-moveit-transfer-vulnerability-cve-2024-5806-under-active-exploitation---immediate-patch-req-xkz9myjq9","mainEntityOfPage":{"@type":"WebPage","@id":"https://daily.dev/posts/critical-moveit-transfer-vulnerability-cve-2024-5806-under-active-exploitation---immediate-patch-req-xkz9myjq9"},"datePublished":"2024-06-27T17:40:53.220Z","dateModified":"2024-06-28T23:17:10.003Z","description":"Critical vulnerabilities CVE-2024-5805 and CVE-2024-5806 in MOVEit Transfer and MOVEit Gateway are being actively exploited. Users should immediately apply...","image":"https://media.daily.dev/image/upload/f_auto,q_auto/v1/posts/1d89198d7a998b63ecec27d538b8444b?_a=AQAEuiZ","thumbnailUrl":"https://media.daily.dev/image/upload/f_auto,q_auto/v1/posts/1d89198d7a998b63ecec27d538b8444b?_a=AQAEuiZ","isAccessibleForFree":true,"articleSection":"Collections","inLanguage":"en","publisher":{"@type":"Organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180}},"author":{"@type":"Organization","name":"Collections","logo":"https://media.daily.dev/image/upload/s--fk_6ycEi--/f_auto,q_auto/v1780996001/logos/collections?_a=BAMAMiWQ0","url":"https://daily.dev/sources/collections"},"commentCount":0,"discussionUrl":"https://daily.dev/posts/critical-moveit-transfer-vulnerability-cve-2024-5806-under-active-exploitation---immediate-patch-req-xkz9myjq9","interactionStatistic":[{"@type":"InteractionCounter","interactionType":{"@type":"LikeAction"},"userInteractionCount":2},{"@type":"InteractionCounter","interactionType":{"@type":"CommentAction"},"userInteractionCount":0}],"keywords":"security,cyber,vulnerability,data-protection","timeRequired":"PT2M"} {"@context":"https://schema.org","@type":"BreadcrumbList","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https://daily.dev"},{"@type":"ListItem","position":2,"name":"Collections","item":"https://daily.dev/sources/collections"},{"@type":"ListItem","position":3,"name":"Critical MOVEit Transfer Vulnerability CVE-2024-5806 Under Active Exploitation - Immediate Patch Required"}]} ```