Critical severity9.8NVD Advisory· Published Apr 2, 2026· Updated Apr 21, 2026

CVE-2026-2699

Description

Customer Managed ShareFile Storage Zones Controller (SZC) allows an unauthenticated attacker to access restricted configuration pages. This leads to changing system configuration and potential remote code execution.

Affected products

Progress (organisation)/Sharefile Storage Zones Controller
cpe:2.3:a:progress:sharefile_storage_zones_controller:*:*:*:*:*:*:*:*
Range: >=5.0.0,<5.12.4

Patches

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

docs.sharefile.com/en-us/storage-zones-controller/5-0/security-vulnerability-feb26nvdVendor Advisory

News mentions

No linked articles in our index yet.

cvss	0.637
epss	0.033
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000