CVE-2026-2699criticalexploração observadaCWE-284CWE-698

CVE-2026-2699: falha crítica em Progress ShareFile Storage Zones Controller

EAR vulnerability in Progress ShareFile Storage Zones Controller (SZC)

Publicada em · Atualizada em

Seguir esta CVE+ Monitorar ShareFile Storage Zones Controller

Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.

97Vexday Risk Score

Corrija agora. Ela exploração observada pelo VulnCheck e tem exploit funcional público.

ssvc Actcvss 9.8epss 58%
da publicação à arma
Publicada no NVD2 de abr.
VulnCheck+99d
Customer Managed ShareFile Storage Zones Controller (SZC) allows an unauthenticated attacker to access restricted configuration pages. This leads to changing system configuration and potential remote code execution.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Produtos afetados
Progress · ShareFile Storage Zones Controller
⚠ Recursos públicos, para você avaliar a exposição de sistemas que controla ou está autorizado a testar. Teste apenas com autorização.
CVEs relacionadas — Progress ShareFile Storage Zones Controller

No mesmo produto, das mais perigosas para as menos.

CVE-2026-2701CRITICALRCE vulnerability in Progress ShareFile Storage Zones Controller (SZC)EPSS 54.5%CVE-2026-16139HIGHArbitrary file write via path traversal in Progress ShareFile Storage Zones Controller potentially leading to remote code executionEPSS 0.9%CVE-2026-16138HIGHRemote code execution via unsafe deserialization in Progress ShareFile Storage Zones Controller's CICO serviceEPSS 0.8%CVE-2026-16137HIGHPath traversal via unsanitized upload filename leads to arbitrary file write in Progress ShareFile Storage Zones ControllerEPSS 0.7%CVE-2026-15724HIGHPath traversal in Progress ShareFile Storage Zones Controller (SZC)EPSS 0.5%CVE-2026-93693MEDIUMUnauthenticated queue manipulation through connector SSRF and response injection in Progress ShareFile Storage Zones ControllerEPSS 0.2%