SS
Product
ShareFile Storage Zones Controller
9
CVEs
0
On KEV
9.8
Max CVSS
3
New 30D
Severity mix
Critical 1High 6Medium 2Low 0
Watch
Add ShareFile Storage Zones Controller to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-2699 | 9.8 | Apr 2 | EAR vulnerability in Progress ShareFile Storage Zones Controller (SZC) Affected: through 5.12.3 |
| CVE-2026-2701 | 8.8 | Apr 2 | RCE vulnerability in Progress ShareFile Storage Zones Controller (SZC) Affected: through 5.12.3 |
| CVE-2026-15724 | 8.7 | Jul 21 | Path traversal in Progress ShareFile Storage Zones Controller (SZC) Affected: through 5.12.4; 6.0.0 through 6.0.1 |
| CVE-2026-16138 | 8.0 | Aug 17 | Remote code execution via unsafe deserialization in Progress ShareFile Storage Zones Controller's CICO service Affected: through 5.12.5 |
| CVE-2026-93695 | 7.4 | Oct 12 | Arbitrary file write through remote file identifiers in Progress ShareFile Storage Zones Controller FileCopyService Affected: through 5.12.6 |
| CVE-2026-16137 | 7.2 | Aug 17 | Path traversal via unsanitized upload filename leads to arbitrary file write in Progress ShareFile Storage Zones Controller Affected: through 5.12.5 |
| CVE-2026-16139 | 7.2 | Aug 17 | Arbitrary file write via path traversal in Progress ShareFile Storage Zones Controller potentially leading to remote code execution Affected: through 5.12.5; 6.0.0 through 6.0.2 |
| CVE-2026-93693 | 6.5 | Oct 12 | Unauthenticated queue manipulation through connector SSRF and response injection in Progress ShareFile Storage Zones Controller Affected: through 5.12.6 |
| CVE-2026-93694 | 4.0 | Oct 12 | Untrusted request routing and forged acknowledgements permit copy-workflow manipulation in Progress ShareFile Storage Zones Controller Affected: through 5.12.6 |
Showing 9