9.1 CriticalCWE-434
CVE-2026-2701
Progress ShareFile Storage Zones Controller vulnerability
ProgressShareFile Storage Zones Controller
Status
- Not in CISA KEV
- Vendor fix available
Exploit probabilityEPSSchecked 25 Oct
55%probability of exploitation in the next 30 days
Higher than 99% of scored CVEs
SeverityCVSS
9.1Critical
Description NVD
Authenticated user can upload a malicious file to the server and execute it, which leads to remote code execution.
Coverage 3 articles · 3 outlets
See the full timeline- Progress Prompts ShareFile Storage Zone Controller Shutdown Amid Security ConcernsSecurityWeek · mentions it in passing
- Preauth RCE chain targets Progress ShareFile Storage Zones 5.xSOCRadar · mentions it in passing
- ThreatsDay Bulletin: Pre-Auth Chains, Android Rootkits, CloudTrail Evasion & 10 More StoriesThe Hacker News · first in our coverage · mentions it in passing