cve-2026-2699

CRITICAL CVSS 9.8 vulncheck_kev
Description

Customer Managed ShareFile Storage Zones Controller (SZC) allows an unauthenticated attacker to access restricted configuration pages. This leads to changing system configuration and potential remote code execution.

Timeline
Published
2026-07-10 00:00 UTC
Last Modified
2026-07-10
CVSS Details

CVSS details not available.

Affected Products

No product information available.

References

No references available.

Linked Vulnerabilities

No linked vulnerabilities found.

{
  "cvss": 9.8,
  "datePublished": "2026-07-10T00:00:00Z",
  "dateUpdated": "2026-07-10T00:00:00Z",
  "description": "Customer Managed ShareFile Storage Zones Controller (SZC) allows an unauthenticated attacker to access restricted configuration pages. This leads to changing system configuration and potential remote code execution.",
  "dueDate": "",
  "id": "CVE-2026-2699",
  "kev_catalogs": [
    "vulncheck"
  ],
  "knownRansomwareCampaignUse": "Unknown",
  "product": "sharefile_storage_zones_controller",
  "requiredAction": "Apply remediations or mitigations per vendor instructions or discontinue use of the product if remediation or mitigations are unavailable.",
  "severity": "CRITICAL",
  "source": "vulncheck_kev",
  "title": "Progress sharefile_storage_zones_controller Improper Access Control",
  "vendor": "Progress"
}
Enrichment data
Nuclei templates
Aggregated bundle (all enrichments)
View JSON API Download JSON