Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

3 records

Advisory: Progress ShareFile Storage Zones Controller — docs.sharefile.com/en-us/sharefile/storage-zones-controller… Clear all filters
TI-2026-70938 CVE-2026-93695 · GHSA-3hhm-qff2-f56h

Arbitrary file write in ShareFile Storage Zones Controller FileCopyService

Priority LOW 34

In Progress ShareFile Storage Zones Controller v5.12.6 and below, FileCopyService uses a remote file identifier when constructing a local temporary file path without enforcing containment.

CVSS 3.1HIGH 7.4 Local No auth No interaction EPSS 0.00171 Published 2026-10-12 No fix listed CWE-22
TI-2026-70937 CVE-2026-93694 · GHSA-28j9-4grr-cjxp

Race condition in Progress ShareFile Storage Zones Controller

Priority LOW 17

In Progress ShareFile Storage Zones Controller v5.12.6 and below, processing of queue items can send acknowledgements to an unvalidated callback URL, this behavior together with a race condition allows the attacker to ca…

CVSS 3.1MEDIUM 4.0 Local No auth No interaction EPSS 0.00072 Published 2026-10-12 No fix listed CWE-321
TI-2026-70936 CVE-2026-93693 · GHSA-474p-wmhw-pxfq

Unauthenticated SSRF in Progress ShareFile Storage Zones Controller

Priority LOW 34

In Progress ShareFile Storage Zones Controller v5.12.6 and below, improper validation of outbound request destinations and parameters, unsafe JSONP response formatting, and insufficient validation on queue service can be…

CVSS 3.1MEDIUM 6.5 Network No auth No interaction EPSS 0.0024 Published 2026-10-12 No fix listed CWE-116