← All advisories

Critical severity9.1NVD Advisory· Published Apr 2, 2026· Updated Apr 21, 2026

CVE-2026-2701

CVE-2026-2701

Description

Authenticated user can upload a malicious file to the server and execute it, which leads to remote code execution.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

1

Progress (organisation)/Sharefile Storage Zones Controller
cpe:2.3:a:progress:sharefile_storage_zones_controller:*:*:*:*:*:*:*:*
Range: >=5.0.0,<5.12.4

Patches

Vulnerability mechanics

References

1

docs.sharefile.com/en-us/storage-zones-controller/5-0/security-vulnerability-feb26nvdVendor Advisory

News mentions

1

You’re Not Supposed To ShareFile With Everyone (Progress ShareFile Pre-Auth RCE Chain CVE-2026-2699 & CVE-2026-2701)
watchTowr Labs · Apr 2, 2026