{"uuid": "a4b2580f-91ec-4c85-87ce-611f9e1f15f0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2699", "type": "seen", "source": "https://t.me/DarkArmyChannel/5764", "content": "New Progress ShareFile Flaws Expose Servers to Unauthorized Remote Takeover\n\nSecurity researchers at watchTowr Labs have disclosed a critical exploit chain in the Progress ShareFile Storage Zone Controller.\n\nThe vulnerabilities, tracked as CVE-2026-2699 and CVE-2026-2701, enable unauthenticated attackers to achieve Remote Code Execution (RCE) and completely compromise vulnerable servers.\n\nWith roughly 30,000 instances exposed to the public internet, organizations are urged to patch immediately to prevent catastrophic data breaches.\n\nManaged file transfer (MFT) solutions remain a top target for advanced persistent threat (APT) groups and ransomware syndicates.\n\nFollowing historic breaches involving tools like MOVEit, Cleo Harmony, and GoAnywhere, threat actors continuously hunt for unpatched data-sharing gateways.\n\nSee more here \ud83d\udc4b", "creation_timestamp": "2026-07-17T19:00:03.145969Z"}