CuraSec

tag: Progress-Software · 2 items

Plan Critical MarkLogic Privilege-Escalation Flaws Allow Admin Takeover
2026-10-13 · The Hacker News · source ↗ #privilege-escalation#database-security#progress-software
  • Engineer — Plan: If you run MarkLogic Server, patch to 11.3.7 or 12.1.0 — two critical flaws let delegated-manager accounts gain full admin control. No active exploitation or PoC reported, so this is a scheduled patch rather than emergency response.
  • SOC/IR — Skip
  • Leader — Skip
Act archived Progress urges ShareFile Storage Zone Controller shutdown over active threat
2026-07-11 · BleepingComputer · source ↗ #sharefile#progress-software#file-sharing
  • Engineer — Act: If you run ShareFile Storage Zone Controllers on-premises, shut them down immediately per Progress’s emergency guidance — this is the same vendor that disclosed the MoveIt zero-day. Monitor Progress’s advisory channel for patch availability before bringing servers back online.
  • SOC/IR — Act: Progress issuing an emergency shutdown recommendation implies an unpatched, actively targeted vulnerability; treat any org running on-prem ShareFile Storage Zone Controllers as potentially exposed. Initiate a sweep for anomalous file-transfer or lateral-movement activity from those hosts since at least 72 hours prior to today.
  • Leader — Act: Progress Software — the MoveIt vendor — is issuing emergency shutdown orders for ShareFile on-premises deployments, a pattern consistent with imminent or in-progress exploitation. This week: confirm whether your org or any critical SaaS vendors run on-prem ShareFile Storage Zone Controllers and request attestations; brief leadership before this surfaces in news as a repeat of the MoveIt incident.