Progress ShareFile Storage Zones Controller vulnerabilities
9 published CVEs name Progress ShareFile Storage Zones Controller among the affected products.
- Published CVEs
- 9
- Last 12 months
- 9
- Critical
- 2
- Known exploited
- 0
Critical 2High 5Medium 2Low 0Not scored 0
Newest CVEs
- CVE-2026-93695
Arbitrary file write through remote file identifiers in Progress ShareFile Storage Zones Controller FileCopyService
Progress · ShareFile Storage Zones Controller
High7.4 - CVE-2026-93694
Untrusted request routing and forged acknowledgements permit copy-workflow manipulation in Progress ShareFile Storage Zones Controller
Progress · ShareFile Storage Zones Controller
Medium4.0 - CVE-2026-93693
Unauthenticated queue manipulation through connector SSRF and response injection in Progress ShareFile Storage Zones Controller
Progress · ShareFile Storage Zones Controller
Medium6.5 - CVE-2026-16137
Path traversal via unsanitized upload filename leads to arbitrary file write in Progress ShareFile Storage Zones Controller
Progress · ShareFile Storage Zones Controller
High7.2 - CVE-2026-16138
Remote code execution via unsafe deserialization in Progress ShareFile Storage Zones Controller's CICO service
Progress · ShareFile Storage Zones Controller
High8.0 - CVE-2026-16139
Arbitrary file write via path traversal in Progress ShareFile Storage Zones Controller potentially leading to remote code execution
Progress · ShareFile Storage Zones Controller
High7.2 - CVE-2026-15724
Path traversal in Progress ShareFile Storage Zones Controller (SZC)
Progress · ShareFile Storage Zones Controller
High8.7 - CVE-2026-2701
RCE vulnerability in Progress ShareFile Storage Zones Controller (SZC)
Progress · ShareFile Storage Zones Controller
Critical9.1 - CVE-2026-2699
EAR vulnerability in Progress ShareFile Storage Zones Controller (SZC)
Progress · ShareFile Storage Zones Controller
Critical9.8
Most common weaknesses
- CWE-22 Path traversal4
- CWE-73 External control of file name or path4
- CWE-20 Improper input validation3
- CWE-434 Unrestricted file upload2
- CWE-918 Server-side request forgery (SSRF)2
- CWE-116 Improper encoding or escaping of output1
- CWE-284 Improper access control1
- CWE-306 Missing authentication for a critical function1
- CWE-321 1
- CWE-362 Race condition1