CVE-2026-2699

Customer Managed ShareFile Storage Zones Controller (SZC) allows an unauthenticated attacker to access restricted configuration pages. This leads to changing system configuration and potential remote code execution.

CVSS 3.1

9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS

58% chance of exploitation in the next 30 days; higher than 99% of CVEs (scores of 2026-10-26)

CWEs

CWE-284, CWE-698

Published

2026-04-02

Modified

2026-10-26

Record from

the NVD, synced 2026-10-26

Affected

• progress:sharefile_storage_zones_controller

References

• https://docs.sharefile.com/en-us/storage-zones-controller/5-0/security-vulnerability-feb26
• https://github.com/watchtowrlabs/watchTowr-vs-Progress-ShareFile-CVE-2026-2699

Check your stackJSON