ShareFile Storage Zones Controller — Cyber Threats, Attacks & Incidents

Related Threat Clusters

• Critical Vulnerabilities in Progress ShareFile Enable Unauthenticated File Exfiltration

  Two critical vulnerabilities, CVE-2026-2699 and CVE-2026-2701, have been identified in Progress ShareFile's Storage Zones Controller, allowing unauthenticated attackers to perform remote code execution and potentially…

  7 articles · Updated April 2, 2026
• Critical Vulnerabilities in Progress ShareFile Prompt Urgent Shutdown

  On July 10, 2026, Progress Software issued an urgent directive for all ShareFile customers to shut down their Storage Zone Controllers (SZC) due to critical vulnerabilities CVE-2026-2699 and CVE-2026-2701. These flaws…

  3 articles · Updated July 13, 2026
• CVE-2026-16139: Remote Code Execution Risk in ShareFile Storage Zones Controller

  CVE-2026-16139 affects Progress ShareFile Storage Zones Controller versions 5.12.5 and earlier, and 6.0.2 and earlier. An authenticated zone administrator can exploit improper validation in the download preparation…

  3 articles · Updated August 17, 2026

Recent Intelligence Reports

• CVE-2026-16139 - Exploits & Severity — Feedly · August 17, 2026
• CVE-2026-2699 - NVD — nvd.nist.gov · July 16, 2026
• Researchers warn of critical flaws in Progress ShareFile — Tech.Yahoo · April 3, 2026

Related Entities