CVE-2026-2701
Analyzed
9.1
Progress
ShareFile Storage Zones Controller
An authenticated file upload vulnerability allows attackers to upload and execute malicious files, leading to remote code execution on the server.
Progress CVEs
5 high and critical vulnerabilities covered by CVE Brief since 2025-10-29, each with independent analyst commentary.
← All vendors RSS feed Watch this vendor
5
Total CVEs
5
AI Analyzed
0
CISA KEV
2
Critical
Profile
0%
ended up actively exploited
0 of 5 added to CISA KEV
40%
rated critical (CVSS 9.0+)
2 critical, 3 high
0
with a public exploit on record
positive-only index; absence is not proof
Last 12 months
5 CVEs in the last 12 months
Products
- ShareFile Storage Zones Controller3
- MOVEit Transfer2
2 products in total
Every figure counts the high and critical CVEs CVE Brief has published for this vendor, not every CVE the vendor has ever received. Exploitation means listing in the CISA Known Exploited Vulnerabilities catalog. No patch-availability figure is shown because CVE Brief does not measure it.
All Vendors
Showing 1-5 of 5 CVEs
CVE-2026-2699
Analyzed
9.8
Progress
ShareFile Storage Zones Controller
Citrix ShareFile Storage Zones Controller (SZC) contains a flaw allowing unauthenticated attackers to access restricted configuration pages, leading t...
CVE-2026-16138
Analyzed
8
Progress
ShareFile Storage Zones Controller
In Progress ShareFile Storage Zones Controller v5
CVE-2026-11903
Analyzed
8
Progress
MOVEit Transfer
Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in Progress MOVEit Transfer (Ad Hoc module)
CVE-2025-10932
Analyzed
8.2
Progress
MOVEit Transfer
Uncontrolled Resource Consumption vulnerability in Progress MOVEit Transfer (AS2 module)