Progress SoftwareCVE-2026-15724
Progress Software ShareFile Storage Zones Controller: path traversal
High8.7CVE-2026-15724 · Published Jul 21, 2026 · updated Sep 3, 2026
In Progress ShareFile Storage Zones Controller versions prior to 5.12.5 and 6.0.2, an authenticated administrative user can exploit a path traversal vulnerability to read arbitrary files from the server filesystem, write files to arbitrary directories, or determine whether specific files exist on the server.
Affected versions
| Package | Affected | Fixed in |
|---|---|---|
| ShareFile Storage Zones Controller Product | <= 5.12.4 | No fix yet |
| >= 6.0.0, <= 6.0.1 | No fix yet |
Details and references
More Progress Software advisories
All Progress Software| Date | Advisory | Severity | Fixed in |
|---|---|---|---|
| Jul 22 | Progress Software Telerik UI for ASP.NET AJAX: server-side request forgery | Medium6.5 | 2026.2.708 |
| Jul 22 | Progress Software Telerik UI for ASP.NET AJAX: unsafe deserialization | High8.1 | 2026.2.708 |
| Jul 22 | Progress Software Telerik UI for ASP.NET AJAX: hard-coded key | High7.5 | 2026.2.708 |
| Jul 22 | In Progress Telerik UI for AJAX prior to v2026.2.708 | High7.5 | 2026.2.708 |
| Jul 22 | Progress Software Telerik UI for ASP.NET AJAX: information disclosure in errors | High7.5 | 2026.2.708 |
| Jul 22 | Progress Software Telerik UI for ASP.NET AJAX: remote code execution | High8.1 | 2026.2.708 |