Security1 hOctober 1, 2026, 03:00

watchTowr finds pre-auth RCE chain in Progress ShareFile

watchTowr published an analysis of a pre-authentication remote code execution chain in Progress ShareFile, tracked as CVE-2026-2699 and CVE-2026-2701. Around the same time, Progress patched a critical authentication bypass in MOVEit Automation, CVE-2026-4670. Both flaws sit in the authentication layer rather than file handling logic.

DEV Community

Open source

watchTowr finds pre-auth RCE chain in Progress ShareFile

ShareFile: pre-auth RCE chain tracked as CVE-2026-2699 and CVE-2026-2701
MOVEit Automation: critical authentication bypass CVE-2026-4670
Both flaws hit the authentication layer, not file handling logic
Experts urge MFT inventory, patching and key rotation

#Progress#ShareFile#MOVEit

Two Unpatched Citrix NetScaler RCE Zero-Days Actively Exploited

Security

CVE-2026-8452 in Citrix NetScaler: SAML parsing overflow leads to pre-auth RCE

Security

CISA warns of critical pre-auth RCE flaw in MikroTik RouterOS

Security

watchTowr finds pre-auth RCE chain in Progress ShareFile

Two Unpatched Citrix NetScaler RCE Zero-Days Actively Exploited

CVE-2026-8452 in Citrix NetScaler: SAML parsing overflow leads to pre-auth RCE

CISA warns of critical pre-auth RCE flaw in MikroTik RouterOS

N-able N-central Pre-Auth RCE Highlights RMM Concentration Risk