Vulnerabilities

CVSS

9.8 Critical

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Risk score

78.4

Published

2026-04-02

Status

Published

Customer Managed ShareFile Storage Zones Controller (SZC) allows an unauthenticated attacker to access restricted configuration pages. This leads to changing system configuration and potential remote code execution.

Weaknesses

CWE-698CWE-284

Coverage 1

vulnerability

Progress Prompts ShareFile Storage Zone Controller Shutdown Amid Security Concerns

Progress Software has instructed ShareFile customers to immediately shut down their Storage Zone Controller servers due to a credible security threat. The company suspects that vulnerabilities, previously addressed in Ma…

SecurityWeek · Jul 13, 2026 Critical

CVE-2026-2699CVE-2026-2701vulnerabilityremote code executioncve

All articles mentioning it

Advisories and references

• docs.sharefile.com/en-us/storage-zones-controller/5-0/security-vulne...
• github.com/watchtowrlabs/watchTowr-vs-Progress-ShareFile-CVE-2026-26...