CVE-2026-2701

Severity

CRITICAL

CVSS

9.1

EPSS

0.56673

Risk score

56.24

CISA KEV

PoC

Published

2026-04-02

Modified

2026-04-03

First seen

2026-08-07

Aliases

EUVD-2026-18220, GHSA-2VXX-W4H2-4G8G

Products

Progress:ShareFile Storage Zones Controller 0 ≤5.12.3

Sources

Authenticated user can upload a malicious file to the server and execute it, which leads to remote code execution.