AI and data stack advisories

Severe, 6 weeks1496Projects326

1496 severe, 6 weeks · 326 projects

Progress SoftwareCVE-2026-16138

Progress Software ShareFile Storage Zones Controller: unsafe deserialization

Progress Software

CVE-2026-16138 · Published Aug 17, 2026 · updated Sep 2, 2026

High8.0
No fix yet
Progress Software advisory

In Progress ShareFile Storage Zones Controller v5.12.5 and below versions, unsafe deserialization of untrusted file metadata can allow a user with write access to a Network share to execute arbitrary code on the Storage Zones Controller host.

Affected versions

PackageAffectedFixed in
ShareFile Storage Zones Controller
Product
<= 5.12.5No fix yet
Details and references
CVSS 3.1
CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Severity from
the vendor (its own CVE record or advisory)
Weakness
CWE-502

More Progress Software advisories

All Progress Software
High 7.2Aug 17Progress Software ShareFile Storage Zones Controller: path traversalCVE-2026-16137no fix yetHigh 7.2Aug 17Progress Software ShareFile Storage Zones Controller: remote code executionCVE-2026-16139no fix yetCritical 9.8Aug 12Progress Software WhatsUp Gold: remote code executionCVE-2026-65941fixed in 26.0.2High 8.0Aug 12Progress Software WhatsUp Gold: cross-site scriptingCVE-2026-65937fixed in 26.0.2Medium 4.3Aug 12Progress Software WhatsUp Gold: improper authorizationCVE-2026-65938fixed in 26.0.2Medium 6.8Aug 12Progress Software WhatsUp Gold: path traversalCVE-2026-65939fixed in 26.0.2