Progress Software confirmed that a high-severity zero-day path traversal vulnerability forced the emergency shutdown of ShareFile Storage Zone Controllers and has now released patches. The company says there is no indication of customer account compromise or active threat, and urges users to install the updates immediately. #ProgressSoftware #ShareFile #StorageZoneController

Corporate storage systems are rarely taken offline unless the risk is serious. Progress Software has asked customers to shut down their ShareFile Storage Zone Controller servers immediately. The request comes in response to a credible external threat. Affected customers have been reporting the outage in the ShareFile support community. What Storage Zone Controllers Are The company temporarily suspended ShareFile accounts that operate through Storage Zone Controller and launched an investigation.

Two vulnerabilities in Progress ShareFile's Storage Zones Controller can be chained to enable unauthenticated file exfiltration and remote code execution on affected systems. The flaws (CVE-2026-2699 and CVE-2026-2701) were reported by watchTowr and fixed in Progress ShareFile 5.12.4 on March 10, but exposed instances should be patched immediately. #ProgressShareFile #StorageZoneController