Product
ShareFile Storage Zone Controller
- First Reported
- Apr 3, 2026
- Latest Reported
- Jul 14, 2026
Reported Context (3)
- The issue was identified as a high-severity path traversal flaw affecting ShareFile Storage Zone Controller 5.x and 6.x versions. Progress Patches ShareFile Storage Zone Controller Zero-Day
- Progress confirmed the disruption on its status page, listing Storage Zone Controller customers as “not operational” and the incident as under investigation as of a 12:12 p.m. Progress Orders ShareFile Storage Zone Controllers Offline Over Undisclosed Threat
- WatchTower Labs disclosed a pre-auth RCE chain in Progress ShareFile (CVE-2026-2699 and CVE-2026-2701) with fixes in Storage Zone Controller 5.12.4 affecting ~30,000 instances. ThreatsDay Roundup Covers ShareFile RCE Flaws, Android Rootkit and CloudTrail Evasion
CVE (3)
Malware (5)
People (1)
Threat Actors (4)
MITRE ATT&CK (3)
Vendors (6)
Products (12)
Industries (1)
Countries (7)
Note: Related entities, including threat actors, malware, CVEs, MITRE ATT&CK techniques, vendors, products, tools, countries, and industries, are shown when they appear in the same reporting. Their presence does not necessarily mean they were targeted, compromised, vulnerable, responsible for the activity, or directly involved in the incident.