9.8 CriticalCWE-698
CVE-2026-2699
Progress ShareFile Storage Zones Controller vulnerability
ProgressShareFile Storage Zones Controller
Status
- Not in CISA KEV
- Vendor fix available
Exploit probabilityEPSSchecked 25 Oct
58%probability of exploitation in the next 30 days
Higher than 99% of scored CVEs
SeverityCVSS
9.8Critical
Description NVD
Customer Managed ShareFile Storage Zones Controller (SZC) allows an unauthenticated attacker to access restricted configuration pages. This leads to changing system configuration and potential remote code execution.
Coverage 3 articles · 3 outlets
See the full timeline- Progress Prompts ShareFile Storage Zone Controller Shutdown Amid Security ConcernsSecurityWeek
- Preauth RCE chain targets Progress ShareFile Storage Zones 5.xSOCRadar
- ThreatsDay Bulletin: Pre-Auth Chains, Android Rootkits, CloudTrail Evasion & 10 More StoriesThe Hacker News · first in our coverage