CVE-2026-2699

EAR vulnerability in Progress ShareFile Storage Zones Controller (SZC)

Customer Managed ShareFile Storage Zones Controller (SZC) allows an unauthenticated attacker to access restricted configuration pages. This leads to changing system configuration and potential remote code execution.

Affected

Progress · ShareFile Storage Zones Controller

CVSS v3.1 PROGRESS

9.8 CRITICALCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS

3.18% chance of exploitation in the next 30 days, 88th percentile

Nuclei

critical · CWE-284

Published

2026-04-02

Updated

2026-04-08

Proof-of-concept exploits (2)

• watchtowrlabs/watchTowr-vs-Progress-ShareFile-CVE-2026-26993★ · 2026-03-25
• 0xBlackash/CVE-2026-26990★ · 2026-04-09

Nuclei templates (1)

• projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-2699.yaml

Security advisories

• https://docs.sharefile.com/en-us/storage-zones-controller/5-0/security-vulnerability-feb26

References

• CVE Record
• NVD entry