CVE-2026-2699 - Vulnerability Analysis

Overview

Customer Managed ShareFile Storage Zones Controller contains an authentication bypass caused by unauthenticated access to restricted configuration pages, letting unauthenticated attackers change system configuration and potentially execute remote code.

Severity & Score

Impact

Unauthenticated attackers can change system configuration and potentially execute remote code, leading to full system compromise.

Mitigation

Update to the latest version of Customer Managed ShareFile Storage Zones Controller.

References

• https://docs.sharefile.com/en-us/storage-zones-controller/5-0/security-vulnerability-feb26
• https://github.com/watchtowrlabs/watchTowr-vs-Progress-ShareFile-CVE-2026-2699

Related Resources

• Vulnerability Intelligence Dashboard
• Credential Scanner