CVE catalog

CVE-2026-2699

Customer Managed ShareFile Storage Zones Controller (SZC) allows an unauthenticated attacker to access restricted configuration pages. This leads to changing system configuration and potential remote

[CVE catalog]

Severity
Critical · CVSS 9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Published
Source
[NVD] · [CVE record]
EPSS
58.39% · Oct 25, 2026

Customer Managed ShareFile Storage Zones Controller (SZC) allows an unauthenticated attacker to access restricted configuration pages. This leads to changing system configuration and potential remote code execution.

Vulnerable and fixed packages

Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.

DistributionPackageReleaseVersionStatus
Cpesharefile_storage_zones_controllerNot reported5.12.4fixed
Cpesharefile_storage_zones_controllerNot reported5.12.4fixed

Fixed-version evidence

DistributionPackageTypeReleaseFixed versionUrgencyOriginBugs
Cpesharefile_storage_zones_controllercpeNot reported5.12.4Not reportedNot reportedNot reported
Cpesharefile_storage_zones_controllercpeNot reported5.12.4Not reportedNVD-CVE-2026-2699Not reported

OpenFactory catalog packages

No matching packages in this catalog.

Observed:

References