CVE-2026-2699CWE-284CWE-698

EAR vulnerability in Progress ShareFile Storage Zones Controller (SZC)

Critical · published April 2, 2026

CVSS v3.1
9.8
EPSS
3%
Percentile
88.0
In the wild
Unconfirmed
What it is

Customer Managed ShareFile Storage Zones Controller (SZC) allows an unauthenticated attacker to access restricted configuration pages. This leads to changing system configuration and potential remote code execution.

The record
Technical detail
CVSS v3.1
9.8 · CRITICAL
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.03181 · 88.0th percentile
Weaknesses
CWE-284 · Improper Access Control; CWE-698 · Execution After Redirect (EAR)
Published
2026-04-02T13:04Z
EPSS history
Timeline
  • 25 SEP 03:25Z
    EPSS moved 60% → 3%
    epss
  • 02 APR 13:04Z
    EAR vulnerability in Progress ShareFile Storage Zones Controller (SZC)
    cvelistv5