This site currently shows sample data for demonstration.

Vulnerabilities

CVE-2026-2701 | BDVDB-2026-324294 Detail

ProgressShareFile Storage Zones Controller

Description#

Authenticated user can upload a malicious file to the server and execute it, which leads to remote code execution.

Impact#

This vulnerability allows an authenticated user to upload a malicious file to the server and execute it, potentially leading to remote code execution.

Weaknesses#

  • CWE-434 Unrestricted Upload of File with Dangerous Type
  • CWE-78 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
  • CWE-94 Improper Control of Generation of Code ('Code Injection')

References#

Exploit#

No public exploit known

History#

  1. Version 1Record published in the CVE List.
  2. Version 2Most recent update recorded in the CVE List.