Reported by 2 outlets
Progress ShareFile Storage Zone Controllers — "Credible External Security Threat" Forces Emergency Shutdown
Why this score
- Breadth
- 1.00 / 2.0 · 2 sources
- Authority
- 1.80 / 2.0 · best outlet weight
- Severity
- 5.00 / 5.0 · CVSS + content signals
- Velocity
- 0.00 / 2.0 · updates in 48h
- Pickup speed
- 0.08 / 0.6 · time to second source
- Recency
- × 0.00 temporal multiplier
- Community
- + 0.00 / 1.5 · reddit signal
- Score
- 0.0 / 10 = base × recency + community
Timeline
-
original reporting
Progress ShareFile Storage Zone Controllers — "Credible External Security Threat" Forces Emergency Shutdown
bleepingcomputer.com · 95d ago · July 11th, 2026
Progress Software has emailed ShareFile customers using on-premises Storage Zone Controllers, instructing them to immediately shut down the Windows servers hosting the controllers. The email, titled "Service Disruption. Immediate Action Required," states: "We have reason to believe there is a credible external security threat targeting Progress Software's ShareFile Storage Zone Controllers." Progress has also disabled cloud-based access to affected accounts and warns that simply disabling access through the ShareFile platform is insufficient — customers must manually power down the servers.
Progress states there is currently "no indication of unauthorized access to any Progress ShareFile accounts or data" and is working with external cybersecurity experts to investigate. The company plans to provide another update within 24 hours. The incident draws immediate comparisons to the 2023 Clop ransomware exploitation of Progress MOVEit Transfer, which resulted in mass data theft from thousands of organizations. Storage Zone Controllers are typically internet-accessible, handle sensitive file transfers, and sit at the boundary between Progress cloud infrastructure and customer-managed storage — making them a high-value target for data exfiltration campaigns.
Progress has not disclosed whether the threat involves a zero-day vulnerability or confirmed compromise of any controllers. Organizations running ShareFile Storage Zone Controllers should treat this as a highest-priority incident and shut down affected servers immediately pending further guidance.
-
update from securityweek.com
Progress Software Forces ShareFile Storage Zone Controller Shutdown Over Credible Threat
securityweek.com · 93d ago · July 13th, 2026
Users speculate the threat may relate to two vulnerabilities patched in March — CVE-2026-2699 (CVSS 9.8) and CVE-2026-2701 (CVSS 9.1) — which can be chained to achieve unauthenticated RCE via configuration changes and malicious file uploads. Review network logs for signs of exploitation targeting the March 2026 flaws.