← Database
CVE-2026-2701
CRITICAL
CVSS: 9.1
Published: 2026-04-02
Modified: 2026-06-17
Description
Authenticated user can upload a malicious file to the server and execute it, which leads to remote code execution.
Affected Platforms
Progress Sharefile Storage Zones Controller
Weakness Type
CWE-78, CWE-94, CWE-434, CWE-434