← Back

CVE-2026-2699

nvd nistnuclei
Published: Apr 2, 2026Modified: Jun 17, 2026

JSON object

Loading...
9.8
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Exploitability: 3.9 / Impact: 5.9
Source: security@progress.com (Secondary)

Description

Customer Managed ShareFile Storage Zones Controller (SZC) allows an unauthenticated attacker to access restricted configuration pages. This leads to changing system configuration and potential remote code execution.

Affected (1)

Progress
1 product
Sharefile Storage Zones Controller
Configuration A
1 vulnerable
Vulnerable SoftwareAffected Versions
Sharefile Storage Zones Controller
From 5.0.0 to 5.12.4

Related CWEs

CWE-284
Improper Access Control
The product does not restrict or incorrectly restricts access to a resource from an unauthorized actor.
CWE-698
Execution After Redirect (EAR)
The web application sends a redirect to another location, but instead of exiting, it executes additional code.

References (2)

Source: security@progress.com
Vendor Advisory
Source: 134c704f-9b21-4f2e-91b3-4a467353bcc0
ExploitThird Party Advisory

Timeline

No history available yet.