AI and data stack advisories

Severe, 6 weeks1496Projects326

1496 severe, 6 weeks · 326 projects

Progress SoftwareCVE-2026-16137

Progress Software ShareFile Storage Zones Controller: path traversal

Progress Software

CVE-2026-16137 · Published Aug 17, 2026 · updated Sep 2, 2026

High7.2
No fix yet
Progress Software advisory

In Progress ShareFile Storage Zones Controller v5.12.5 and below, a party with valid zone credentials can perform path traversal using resumable upload initiation endpoint, allowing the party to write arbitrary content to any location writable by the application's service account. This may result in the execution of attacker-supplied code.

Affected versions

PackageAffectedFixed in
ShareFile Storage Zones Controller
Product
<= 5.12.5No fix yet
Details and references

More Progress Software advisories

All Progress Software