CVE-2026-2699

Description

Customer Managed ShareFile Storage Zones Controller (SZC) allows an unauthenticated attacker to access restricted configuration pages. This leads to changing system configuration and potential remote code execution.

CVSS Vector

References

• https://docs.sharefile.com/en-us/storage-zones-controller/5-0/security-vulnerability-feb26
• https://github.com/watchtowrlabs/watchTowr-vs-Progress-ShareFile-CVE-2026-2699