This section outlines issues tracked and fixed by the MOVEit product team for the 2025.0.7 Service Pack.
Note: See the What's New section for a broader summary of features and improvements.

ID

Category

Fixed Issue

100990 Security, HTTP Updated Axios dependency to 1.15.
100991 Security Updated qs dependency to 6.14.5.
101107 Utilities, DMZRestore Added option to DMZBackup utility for large database backups.
103199 Database, Installer Updated MySQL dependency to 9.7.0.
103477 Reports, Security CVE-2026-8649: Fixed issue with scoping of custom report results.
103614 SFTP, Security Updated SFTP dependencies with better memory and connection management.
103627 Settings (org) Security CVE-2026-8650: Fixed issue that could allow MOVEit admins to view system file contents.
103628 Users, Security CVE-2026-8800: Fixed an issue that could allow an Audit User to view external token metadata in other orgs.
103629 WebUI, Security CVE-2026-8651: Fixed issue with IP resolution when accessing the machine interface.