Skip to main content

EUVD-2026-18218

| CVE-2026-2699 CRITICAL
Execution After Redirect (EAR) (CWE-698)
2026-04-02 ProgressSoftware GHSA-pmc3-p9hx-jq96 GHSA-ppf9-6x38-42wv
RCE
9.8
CVSS 3.1
Share

CVSS VectorNVD

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Attack Vector
Network
Attack Complexity
Low
Privileges Required
None
User Interaction
None
Scope
Unchanged
Confidentiality
High
Integrity
High
Availability
High

Lifecycle Timeline

7
Analysis Updated
Apr 21, 2026 - 00:43 vuln.today
v2 (cvss_changed)
Re-analysis Queued
Apr 21, 2026 - 00:37 vuln.today
cvss_changed
PoC Detected
Apr 03, 2026 - 16:10 vuln.today
Public exploit code
Patch released
Apr 02, 2026 - 20:30 nvd
Patch available
EUVD ID Assigned
Apr 02, 2026 - 13:45 euvd
EUVD-2026-18218
Analysis Generated
Apr 02, 2026 - 13:45 vuln.today
CVE Published
Apr 02, 2026 - 13:04 nvd
CRITICAL 9.8

DescriptionNVD

Customer Managed ShareFile Storage Zones Controller (SZC) allows an unauthenticated attacker to access restricted configuration pages. This leads to changing system configuration and potential remote code execution.

AnalysisAI

Unauthenticated remote code execution affects Progress ShareFile Storage Zones Controller versions up to 5.12.3 via unauthorized access to restricted configuration pages. Attackers can modify system configuration remotely without authentication, leading to complete system compromise. …

Sign in for full analysis, threat intelligence, and remediation guidance.

RemediationAI

Within 24 hours: identify all ShareFile Storage Zones Controller instances and their current versions in the environment; consult Progress security advisory for exact patched version requirements. Within 7 days: apply vendor-released patch to all affected systems (versions up to 5.12.3); validate patch deployment across all Storage Zones Controllers. …

Sign in for detailed remediation steps.

Full analysis requires sign-in

Get intelligence summaries, risk assessment, exploit details, threat intel, and remediation guidance.

Sign in - Free

Share

EUVD-2026-18218 vulnerability details – vuln.today
Back

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy