PT-2026-29735 · Progress · Sharefile Storagezones Controller

Sonny · Published 2026-04-02 · Updated 2026-04-02 · CVE-2026-2699

Mitre

CVSS v3.1

9.8

Critical

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Customer Managed ShareFile Storage Zones Controller (SZC) allows an unauthenticated attacker to access restricted configuration pages. This leads to changing system configuration and potential remote code execution.

Exploit

Fix

Improper Access Control

Weakness Enumeration

CWE-284

CWE-698

Related Identifiers

CVE-2026-2699

Affected Products

Sharefile Storagezones Controller

References · 6

• 🔥 https://github.com/watchtowrlabs/watchTowr-vs-Progress-ShareFile-CVE-2026-2699 · Exploit
• https://docs.sharefile.com/en-us/storage-zones-controller/5-0/security-vulnerability-feb26 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-2699 · Security Note
• https://twitter.com/Dinosn/status/2039663000928321631 · Twitter Post
• https://twitter.com/_r_netsec/status/2039662398056132717 · Twitter Post
• https://twitter.com/secharvesterx/status/2039674301368946899 · Twitter Post