FlagThis
← Back to CVE List
Vulnerability Intelligence Report
EAR vulnerability in Progress ShareFile Storage Zones Controller (SZC)

CVE-2026-2699

Customer Managed ShareFile Storage Zones Controller (SZC) allows an unauthenticated attacker to access restricted configuration pages. This leads to changing system configuration and potential remote code execution.

Nuclei Template
CVSS Base Score
9.8
CRITICAL
Exploitability:3.9
Impact Score:5.9
EPSS Probability:49.42%
Executive Threat Verdict
Evaluating...
Evaluating Threat Landscape...
Assessing known weaponization, exploitation telemetry, and federal advisories.
Attack Surface
—
Authentication
—
Weaponization
—
SSVC Action
—

Weaknesses (CWE)

CWE-698 ↗CWE-698: Execution After Redirect (EAR)
CWE-284 ↗CWE-284: Improper Access Control

Affected Products & Versions

Vendor Product Affected Versions
Progress ShareFile Storage Zones Controller 0 <= 5.12.3 (affected)

References & Technical Advisories

NVD Listing ↗ MITRE Listing ↗ GitHub Advisory ↗
No reference links found.

Threat Intelligence Signals

Nuclei Template
SCANNER AVAILABLE
EPSS Score
49.424%
GitHub Advisory
GHSA-ppf9-6x38-42wv ↗

Identity & Timeline

StatusPUBLISHED
Assigning AuthorityProgress Software Corporation · Vendor · USA
Reserved2026-02-18T16:18:30
Published2026-04-02T13:04:00
Last Updated2026-04-08T15:25:21

Related Intelligence

Related CVEs
CVE-2026-2701 CVSS 9.1 — Authenticated user can upload a malicious file to the server and execu…
CVE-2026-15724 CVSS 8.7 — In Progress ShareFile Storage Zones Controller versions prior to 5.12.…
CVE-2026-16138 CVSS 8.0 — In Progress ShareFile Storage Zones Controller v5.12.5 and below versi…
CVE-2026-93695 CVSS 7.4 — In Progress ShareFile Storage Zones Controller v5.12.6 and below, File…
CVE-2026-16137 CVSS 7.2 — In Progress ShareFile Storage Zones Controller v5.12.5 and below, a pa…
LINK COPIED TO CLIPBOARD