by Kastro
Paper/Archive/CVE-2026-2699

CVE-2026-2699

Progress ShareFile Storage Zones Controller — EAR vulnerability in Progress ShareFile Storage Zones Controller (SZC)

EPSS 58%public exploitCVSS 9.8
critical.is priorityof 100
59
CVSS 9.8 (CNA)9.8 / 10 × 3029.4Not in CISA KEV+300.0EPSS percentile 99.1.991 × 2019.8Exploit: SSVC poc+1010.0SSVC exploitation: poc+100.0
Description · from the CVE record

Customer Managed ShareFile Storage Zones Controller (SZC) allows an unauthenticated attacker to access restricted configuration pages. This leads to changing system configuration and potential remote code execution.

Affected

ProductAffectedFixed inSource
ShareFile Storage Zones Controller≤ 5.12.3–CNA

Scores by source

ProgressSoftware (CNA)9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CISA ADPSSVCExploitation: poc · Automatable: yes · Technical impact: total

References

advisorydocs.sharefile.com/en-us/storage-zones-controller/5-0/security-vulnerability-feb26exploitgithub.com/watchtowrlabs/watchTowr-vs-Progress-ShareFile-CVE-2026-2699