{"id":201936,"date":"2026-04-03T12:07:00","date_gmt":"2026-04-03T16:07:00","guid":{"rendered":"https:\/\/testing.news-you-need.com\/index.php\/2026\/04\/03\/researchers-warn-of-critical-flaws-in-progress-sharefile\/"},"modified":"2026-04-03T12:30:35","modified_gmt":"2026-04-03T16:30:35","slug":"researchers-warn-of-critical-flaws-in-progress-sharefile","status":"publish","type":"post","link":"https:\/\/testing.news-you-need.com\/index.php\/2026\/04\/03\/researchers-warn-of-critical-flaws-in-progress-sharefile\/","title":{"rendered":"Researchers warn of critical flaws in Progress ShareFile"},"content":{"rendered":"<p><a href=\"https:\/\/www.cybersecuritydive.com\/news\/researchers-critical-flaws-progress-sharefile\/816599\/\">Researchers warn of critical flaws in Progress ShareFile<\/a><\/p>\n<p><a href=\"https:\/\/www.cybersecuritydive.com\/news\/researchers-critical-flaws-progress-sharefile\/816599\/\">https:\/\/www.cybersecuritydive.com\/news\/researchers-critical-flaws-progress-sharefile\/816599\/<\/a><\/p>\n<p>Publish Date: <a href=\"publish_date]\">2026-04-03 12:07:00<\/a><\/p>\n<p>Source Domain: <a href=\"www.cybersecuritydive.com\">www.cybersecuritydive.com<\/a><\/p>\n<p>Author: <a href=\"\"><\/a><\/p>\n<p> Using an unordered list, summarize the following article with between 4 and 8 key points. <\/p>\n<p>Security researchers warn that chaining two critical vulnerabilities in Progress Software\u2019s ShareFile service could allow an attacker to achieve remote code execution.<br \/>\nThe flaws exist in ShareFile Storage Zones Controller, which helps users manage files while they are using the ShareFile software-as-a-service interface, according to researchers at watchTowr Labs.<br \/>\nThe vulnerabilities include an authentication bypass flaw, tracked as CVE-2026-2699, and a remote code execution flaw,\u00a0CVE-2026-2701. The vulnerabilities have severity scores of 9.8 and 9.1, respectively.<\/p>\n<p>Progress Software warned in a security bulletin released Thursday that an attacker could access on-premises Storage Zones Controller configuration pages, allowing them to make changes in system configuration or achieve remote code execution.<br \/>\nThere is no immediate evidence of exploitation, but researchers urged users to immediately apply security updates.<br \/>\nResearchers from watchTowr said there were about 30,000 instances visible on the internet, while more targeted analysis from Shadowserver Foundation showed 784 unique IPs were exposed.\u00a0<br \/>\nThe U.S. and Germany are the most widely exposed geographic locations, according to Shadowserver data.\u00a0<br \/>\nResearchers noted that similar file-transfer software has been a target of significant exploitation campaigns in recent years.\u00a0<br \/>\nProgress Software dealt with a wave of exploitation activity involving MOVEit file transfer software in 2023. Major government agencies and companies were targeted in a subsequent campaign from the Clop ransomware group.\u00a0<br \/>\nA less extensive exploitation wave involving Cleo file-transfer software\u00a0occurred in 2024.<\/p>\n<p><\/p>\n","protected":false},"excerpt":{"rendered":"<p>Researchers warn of critical flaws in Progress ShareFile https:\/\/www.cybersecuritydive.com\/news\/researchers-critical-flaws-progress-sharefile\/816599\/ Publish Date: 2026-04-03 12:07:00 Source Domain:&#8230;<\/p>\n","protected":false},"author":1,"featured_media":201937,"comment_status":"closed","ping_status":"","sticky":false,"template":"","format":"standard","meta":{"fifu_image_url":"https:\/\/imgproxy.divecdn.com\/PZU-cEiO3prxaGpboCdjs8Z5fl2DKyBtefYl1wWuscE\/g:ce\/rs:fit:770:435\/Z3M6Ly9kaXZlc2l0ZS1zdG9yYWdlL2RpdmVpbWFnZS9HZXR0eUltYWdlcy0xMTI4ODQ1MzYxLmpwZw==.webp","fifu_image_alt":"","footnotes":""},"categories":[15],"tags":[],"class_list":["post-201936","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-cybersecurity"],"_links":{"self":[{"href":"https:\/\/testing.news-you-need.com\/index.php\/wp-json\/wp\/v2\/posts\/201936"}],"collection":[{"href":"https:\/\/testing.news-you-need.com\/index.php\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/testing.news-you-need.com\/index.php\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/testing.news-you-need.com\/index.php\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/testing.news-you-need.com\/index.php\/wp-json\/wp\/v2\/comments?post=201936"}],"version-history":[{"count":1,"href":"https:\/\/testing.news-you-need.com\/index.php\/wp-json\/wp\/v2\/posts\/201936\/revisions"}],"predecessor-version":[{"id":201938,"href":"https:\/\/testing.news-you-need.com\/index.php\/wp-json\/wp\/v2\/posts\/201936\/revisions\/201938"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/testing.news-you-need.com\/index.php\/wp-json\/wp\/v2\/media\/201937"}],"wp:attachment":[{"href":"https:\/\/testing.news-you-need.com\/index.php\/wp-json\/wp\/v2\/media?parent=201936"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/testing.news-you-need.com\/index.php\/wp-json\/wp\/v2\/categories?post=201936"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/testing.news-you-need.com\/index.php\/wp-json\/wp\/v2\/tags?post=201936"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}