Critical CVE-2026-2699 and CVE-2026-2701 Vulnerabilities Force Immedi…

Progress Software issued an urgent directive on 10 July 2026 requiring immediate shutdown of all on-premises ShareFile Storage Zone Controllers v5.x due to two critical vulnerabilities (CVE-2026-2699 and CVE-2026-2701) enabling unauthenticated remote code execution; no patch is currently available, though no confirmed exploitation in the wild has been reported. If you run ShareFile Storage Zone Controllers on-premises, your file transfer infrastructure is now offline until Progress ships a patch—and your customers are scrambling for alternatives. You have a window to sell them a migration path before the vendor patches.