Corporate storage is usually disconnected only at serious risk, and Progress Software asked clients to immediately stop the ShareFile Storage Zone Controller servers because of a reliable external threat.
The company temporarily blocked ShareFile accounts that work through Storage Zone Controller and began checking. Such controllers allow organizations to store data in their own infrastructure or from a third-party supplier and independently manage the storage.
Progress Software did not reveal the nature of the threat and did not name the timing of the lifting of restrictions. At the time of notification, the company found no signs of unauthorized entry into ShareFile accounts or access to customer data.
Some users have suggested that attackers may use vulnerabilities CVE-2026-2699 (9.8 on the CVSS 3.1) scale and CVE-2026-2701 (9.1 on the CVSS 3.1) scale, closed in March. There is no confirmation of such a connection yet. Joint operation of two errors allowed without authorization to change the controller settings and download malicious files, and then execute commands on the server.
While the test continues, Progress Software recommends manually disabling the servers on which the Storage Zone Controller operates. The company considers the shutdown of systems as an additional measure of protection before the circumstances are clarified.
The company temporarily blocked ShareFile accounts that work through Storage Zone Controller and began checking. Such controllers allow organizations to store data in their own infrastructure or from a third-party supplier and independently manage the storage.
Progress Software did not reveal the nature of the threat and did not name the timing of the lifting of restrictions. At the time of notification, the company found no signs of unauthorized entry into ShareFile accounts or access to customer data.
Some users have suggested that attackers may use vulnerabilities CVE-2026-2699 (9.8 on the CVSS 3.1) scale and CVE-2026-2701 (9.1 on the CVSS 3.1) scale, closed in March. There is no confirmation of such a connection yet. Joint operation of two errors allowed without authorization to change the controller settings and download malicious files, and then execute commands on the server.
While the test continues, Progress Software recommends manually disabling the servers on which the Storage Zone Controller operates. The company considers the shutdown of systems as an additional measure of protection before the circumstances are clarified.
