# CVE-2026-2699: Customer Managed ShareFile Storage Zones Controller (SZC) allows an unauthenticated attacker to access restricted…

Source: https://junglewise.ai/threats/cve-2026-2699-customer-managed-sharefile-storage-zones-controller-szc-allows-an  
Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats  
Published: 2026-04-02  
License: CC BY 4.0 with a link back

CVE-2026-2699 · Severity: critical · CVSS 9.8 · Published 2026-04-02

Customer Managed ShareFile Storage Zones Controller (SZC) allows an unauthenticated attacker to access restricted configuration pages. This leads to changing system configuration and potential remote code execution.

Technologies: [Progress ShareFile Storage Zones Controller](https://junglewise.ai/threats/technologies/progress-sharefile-storage-zones-controller). Vendors: [Progress](https://junglewise.ai/threats/vendors/progress).

## Quick answers

**Is CVE-2026-2699 exploited in the wild?** No. Junglewise Threat Intelligence has no report of CVE-2026-2699 being exploited in the wild.

**How severe is CVE-2026-2699?** Critical severity, with a CVSS score of 9.8, published 2 April 2026.

**Which products and versions are affected?** Progress ShareFile Storage Zones Controller. The advisory does not name versions.

**Is there a fix for CVE-2026-2699?** No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.

**Am I affected by CVE-2026-2699?** Check whether you run Progress ShareFile Storage Zones Controller. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

## Affected products

- Progress ShareFile Storage Zones Controller

## Related threats

- [Progress ShareFile Storage Zones Controller path traversal in FileCopyService](https://junglewise.ai/threats/cve-2026-93695-in-progress-sharefile-storage-zones-controller-v5-12-6-and-below)
- [Progress ShareFile Storage Zones Controller unvalidated callback processing](https://junglewise.ai/threats/cve-2026-93694-in-progress-sharefile-storage-zones-controller-v5-12-6-and-below)
- [Authenticated user can upload a malicious file to the server and execute it, which leads to remote code execution.](https://junglewise.ai/threats/cve-2026-2701-authenticated-user-can-upload-a-malicious-file-to-the-server-and)