CVE-2026-2699

| EUVD-2026-18218 CRITICAL
2026-04-02 ProgressSoftware GHSA-pmc3-p9hx-jq96 GHSA-ppf9-6x38-42wv
9.8
CVSS 3.1
Share

CVSS Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Attack Vector
Network
Attack Complexity
Low
Privileges Required
None
User Interaction
None
Scope
Unchanged
Confidentiality
High
Integrity
High
Availability
High

Lifecycle Timeline

5
PoC Detected
Apr 03, 2026 - 16:10 vuln.today
Public exploit code
Patch Released
Apr 02, 2026 - 20:30 nvd
Patch available
Analysis Generated
Apr 02, 2026 - 13:45 vuln.today
EUVD ID Assigned
Apr 02, 2026 - 13:45 euvd
EUVD-2026-18218
CVE Published
Apr 02, 2026 - 13:04 nvd
CRITICAL 9.8

Tags

RCE

Description

Customer Managed ShareFile Storage Zones Controller (SZC) allows an unauthenticated attacker to access restricted configuration pages. This leads to changing system configuration and potential remote code execution.

Analysis

Unauthenticated remote code execution in Progress ShareFile Storage Zones Controller allows network attackers to access restricted configuration pages and execute arbitrary code with no user interaction required. This critical vulnerability (CVSS 9.8) affects customer-managed SZC deployments and has publicly available exploit code, enabling trivial weaponization. …

Sign in for full analysis, threat intelligence, and remediation guidance.

Remediation

Within 24 hours: Inventory all Progress ShareFile Storage Zones Controller instances across your infrastructure and determine deployment type (cloud-hosted vs. customer-managed on-premises). …

Sign in for detailed remediation steps.

Full analysis requires sign-in

Get intelligence summaries, risk assessment, exploit details, threat intel, and remediation guidance.

Sign in - Free

Priority Score

69
Low Medium High Critical
KEV: 0
EPSS: +0.4
CVSS: +49
POC: +20

Share

CVE-2026-2699 vulnerability details – vuln.today
Back

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy