cybercrime.clubhttps://cybercrime.club/tags/cve-2026-5174/Infrastructure security news for people who build infrastructure.Hugo -- gohugo.ioen-usMon, 04 May 2026 23:09:11 -0400MOVEit Automation Hit With CVSS 9.8 Auth Bypass: CVE-2026-4670 Grants Admin Without Credentialshttps://cybercrime.club/posts/moveit-automation-cve-2026-4670-auth-bypass-airbus/Mon, 04 May 2026 23:09:11 -0400https://cybercrime.club/posts/moveit-automation-cve-2026-4670-auth-bypass-airbus/Progress patches a 9.8-severity authentication bypass plus a 7.7 privilege escalation in MOVEit Automation; Airbus reported both, no in-the-wild exploitation yet but the MFT family's track record demands immediate patching.vulnerability