Progress SoftwareCVE-2026-15724
Progress Software ShareFile Storage Zones Controller: path traversal
No fix yet
In Progress ShareFile Storage Zones Controller versions prior to 5.12.5 and 6.0.2, an authenticated administrative user can exploit a path traversal vulnerability to read arbitrary files from the server filesystem, write files to arbitrary directories, or determine whether specific files exist on the server.
Affected versions
| Package | Affected | Fixed in |
|---|---|---|
| ShareFile Storage Zones Controller Product | <= 5.12.4 | No fix yet |
| >= 6.0.0, <= 6.0.1 | No fix yet |