Critical severity9.1NVD Advisory· Published Apr 2, 2026· Updated Jun 17, 2026
CVE-2026-2701
CVE-2026-2701
Description
Authenticated user can upload a malicious file to the server and execute it, which leads to remote code execution.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
2- cpe:2.3:a:progress:sharefile_storage_zones_controller:*:*:*:*:*:*:*:*Range: >=5.0.0,<5.12.4
Patches
Vulnerability mechanics
References
1News mentions
5- Progress Urges ShareFile Shutdown Over 'Credible' ThreatGovInfoSecurity · Jul 13, 2026
- Security threat prompts Progress to disable ShareFile accounts, tell customers to shut down serversHelp Net Security · Jul 13, 2026
- Progress Prompts ShareFile Storage Zone Controller Shutdown Amid Security ConcernsSecurityWeek · Jul 13, 2026
- Progress Urges ShareFile Admins to Shut Down Servers Over Credible Security ThreatCyber Security News · Jul 10, 2026
- You’re Not Supposed To ShareFile With Everyone (Progress ShareFile Pre-Auth RCE Chain CVE-2026-2699 & CVE-2026-2701)watchTowr Labs · Apr 2, 2026