What’s Vulnerable › Vulnerabilities

CVE-2026-2701: RCE vulnerability in Progress ShareFile Storage Zones Controller (SZC)

• Severity: high (CVSS 8.8 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 54.5% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2026-04-02 · updated 2026-10-26
• Weakness: CWE-78

Description

Authenticated user can upload a malicious file to the server and execute it, which leads to remote code execution.

Affected products

• Progress ShareFile Storage Zones Controller: from 5.0.0 before 5.12.4 — fixed in 5.12.4

How to fix

Upgrade to a fixed version: Progress ShareFile Storage Zones Controller 5.12.4. Check the vendor advisory for mitigations.

In the news

• You’re Not Supposed To ShareFile With Everyone (Progress ShareFile Pre-Auth RCE Chain CVE-2026-2699 & CVE-2026-2701)

References

• https://docs.sharefile.com/en-us/storage-zones-controller/5-0/security-vulnerability-feb26

Get alerted when CVE-2026-2701 or the next vulnerability affects your stack