9.8

CVE-2026-2699

Medienbericht
Exploit

EAR vulnerability in Progress ShareFile Storage Zones Controller (SZC)

Customer Managed ShareFile Storage Zones Controller (SZC) allows an unauthenticated attacker to access restricted configuration pages. This leads to changing system configuration and potential remote code execution.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Progress ≫ Sharefile Storage Zones Controller Version >= 5.0.0 < 5.12.4
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 41.59% 0.975
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
security@progress.com 9.8 3.9 5.9
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CWE-284 Improper Access Control

The product does not restrict or incorrectly restricts access to a resource from an unauthorized actor.

CWE-698 Execution After Redirect (EAR)

The web application sends a redirect to another location, but instead of exiting, it executes additional code.