VULNERABILITY INTELLIGENCE

CVE-2026-2699

CVSS score9.8 CRITICAL
EPSS probability58.39%
CISA KEVNot currently listed
Published2026-04-02
Last modified2026-10-26
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Description

Customer Managed ShareFile Storage Zones Controller (SZC) allows an unauthenticated attacker to access restricted configuration pages. This leads to changing system configuration and potential remote code execution.

Weakness classification

  • security@progress.com: CWE-284
  • nvd@nist.gov: NVD-CWE-noinfo

Primary references