CVE-2026-2699

CVSS

—

EPSS

0.032 (87.5th percentile)

CISA KEV

Not listed

Exploitation

No report

Public exploits

None seen

State

Unknown

Coverage

• 

  watchTowr Labs02 Apr, 10:00

  You’re Not Supposed To ShareFile With Everyone (Progress ShareFile Pre-Auth RCE Chain CVE-2026-2699 & CVE-2026-2701)

  If you squint and look at the CISA KEV list, you might think it's made up exclusively of vulnerabilities in file transfer solutions. While this would be wrong (and you shouldn’t squint, it’s bad for your eyes), file transfer solutions do play a decent

  ↗labs.watchtowr.com/youre-not-supposed-to-sharef…(opens the publisher's site in a new tab)

What we observed