EAR vulnerability in Progress ShareFile Storage Zones Controller (SZC)
97Vexday Risk Score
Patch now. It exploitation observed by VulnCheck and has a working public exploit.
ssvc Actcvss 9.8epss 58%
from disclosure to weapon
Published on NVDApr 2
VulnCheck+99d
exploitation probability
58%top 1% of all CVEs
observed exploitation
yesVulnCheck
1 public exploit(s)
Customer Managed ShareFile Storage Zones Controller (SZC) allows an unauthenticated attacker to access restricted configuration pages. This leads to changing system configuration and potential remote code execution.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Affected products
Progress · ShareFile Storage Zones Controllerpublic PoCs found — 1
cve_referencegithub.com/watchtowrlabs/watchTowr-vs-Progress-ShareFile-CVE-2026-2699unverified⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.