CVE-2026-2701

🗓️ 02 Apr 2026 13:04:38Reported by ProgressSoftwareType

cve🔗 web.nvd.nist.gov📰️ 7 Media mentions👁 12 Views

Authenticated user can upload malicious file to ShareFile Storage Zones Controller and execute it.

Reporter	Title	Published	Views	Family All 11
ATTACKERKB	CVE-2026-2701	2 Apr 202613:04	–	attackerkb
Circl	CVE-2026-2701	2 Apr 202609:59	–	circl
CNNVD	Progress ShareFile Storage Zones Controller 代码问题漏洞	2 Apr 202600:00	–	cnnvd
Cvelist	CVE-2026-2701 RCE vulnerability in Progress ShareFile Storage Zones Controller (SZC)	2 Apr 202613:04	–	cvelist
EUVD	EUVD-2026-18220	2 Apr 202615:31	–	euvd
Nuclei	Progress ShareFile Storage Zones Controller - Authentication Bypass	23 Jun 202605:08	–	nuclei
NVD	CVE-2026-2701	2 Apr 202614:16	–	nvd
Positive Technologies	PT-2026-29736	2 Apr 202600:00	–	ptsecurity
RedhatCVE	CVE-2026-2701	3 Apr 202616:59	–	redhatcve
The Hacker News	ThreatsDay Bulletin: Pre-Auth Chains, Android Rootkits, CloudTrail Evasion & 10 More Stories	2 Apr 202612:45	–	thn

NVD

Node

progress sharefile_storage_zones_controllerRange5.0.0–5.12.4

[
  {
    "vendor": "Progress",
    "product": "ShareFile Storage Zones Controller",
    "versions": [
      {
        "status": "affected",
        "version": "0",
        "lessThanOrEqual": "5.12.3",
        "versionType": "semver"
      }
    ],
    "defaultStatus": "unaffected"
  }
]

Source	Link
docs	www.docs.sharefile.com/en-us/storage-zones-controller/5-0/security-vulnerability-feb26

17 Jun 2026 10:31Current

6.3Medium risk

Vulners AI Score6.3

CVSS 3.18.8 - 9.1

EPSS0.4881

SSVC

progress sharefile storage zones controller remote code execution authenticated user malicious file upload