Description
Authenticated user can upload a malicious file to the server and execute it, which leads to remote code execution.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Progress | ShareFile Storage Zones Controller | ≤ 5.12.3 | — |
Critical · 9.1
CVE-2026-2701
EUVD-2026-18220GHSA-2vxx-w4h2-4g8g
RCE vulnerability in Progress ShareFile Storage Zones Controller (SZC)
Published Apr 2, 2026 · Updated Apr 3, 2026 · Assigned by ProgressSoftware