{
  "_links": {
    "capec": {
      "href": "/api/v1/vulnerability/cve-2026-2699/capec"
    },
    "cvss": {
      "href": "/api/v1/vulnerability/cve-2026-2699/cvss"
    },
    "cwe": {
      "href": "/api/v1/vulnerability/cve-2026-2699/cwe"
    },
    "enrichment": {
      "href": "/api/v1/vulnerability/cve-2026-2699/enrichment"
    },
    "gcve": {
      "href": "/api/v1/vulnerability/cve-2026-2699/gcve"
    },
    "self": {
      "href": "/api/v1/vulnerability/cve-2026-2699"
    },
    "sightings": {
      "href": "/api/v1/sightings/cve-2026-2699"
    }
  },
  "enrichments": {
    "cisa-kev": {
      "kev": false
    },
    "epss": {
      "epss": 0.59506,
      "kev": false,
      "percentile": 0.99082
    },
    "nuclei": {
      "nuclei": true,
      "nuclei_template": "http/cves/2026/CVE-2026-2699.yaml",
      "nuclei_template_severity": "critical",
      "nuclei_template_yaml": "id: CVE-2026-2699\n\ninfo:\n  name: Progress ShareFile Storage Zones Controller - Authentication Bypass\n  author: DhiyaneshDk\n  severity: critical\n  description: |\n    Customer Managed ShareFile Storage Zones Controller (SZC) contains an authentication bypass (Execution After Redirect) that allows unauthenticated attackers to access restricted configuration pages. This leads to changing system configuration and potential remote code execution.\n  impact: |\n    Unauthenticated attackers can change system configuration and potentially execute remote code, leading to full system compromise.\n  remediation: Update ShareFile Storage Zones Controller to version 5.12.4 or later.\n  reference:\n    - https://github.com/watchtowrlabs/watchTowr-vs-Progress-ShareFile-CVE-2026-2699\n    - https://labs.watchtowr.com/youre-not-supposed-to-sharefile-with-everyone-progress-sharefile-pre-auth-rce-chain-cve-2026-2699-cve-2026-2701/\n    - https://docs.sharefile.com/en-us/storage-zones-controller/5-0/security-vulnerability-feb26\n  classification:\n    cvss-metrics: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H\n    cvss-score: 9.8\n    cve-id: CVE-2026-2699\n    cwe-id: CWE-284\n    epss-score: 0.59506\n    epss-percentile: 0.99082\n  metadata:\n    verified: true\n    max-request: 1\n    vendor: progress\n    product: sharefile_storage_zones_controller\n    fofa-query: title==\"ShareFile Storage Server\"\n    shodan-query: title:\"ShareFile Storage Server\"\n  tags: cve,cve2026,progress,sharefile,auth-bypass,vkev\n\nflow: http(1) && http(2)\n\nhttp:\n  - method: GET\n    path:\n      - \"{{BaseURL}}\"\n\n    host-redirects: true\n    max-redirects: 2\n\n    matchers:\n      - type: word\n        part: body\n        words:\n          - \"ShareFile Storage Server\"\n        internal: true\n\n  - raw:\n      - |\n        GET /ConfigService/Admin.aspx HTTP/1.1\n        Host: {{Hostname}}\n\n    matchers:\n      - type: dsl\n        dsl:\n          - 'status_code == 302'\n          - 'content_length >= 10000'\n        condition: and\n# digest: 4a0a00473045022040a0571b6309256304115ae36a4a4ad0d585733faa0d2a6c19edfa6d9ce31e0f022100a47db71d006520dc185ff794d27fc4426888df9a5a124a3d7a76d1a4fe0cba95:922c64590222798bb761d5b6d8e72950"
    }
  },
  "vuln_id": "cve-2026-2699"
}