CVE-2026-15724

8.7 highEPSS 0.5%

In Progress ShareFile Storage Zones Controller versions prior to 5.12.5 and 6.0.2, an authenticated administrative user can exploit a path traversal vulnerability to read arbitrary files from the server filesystem, write files to arbitrary directories, or determine whether specific files exist on the server.

CVSS 3.1: 8.7CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:N
EPSS: 0.5% chance of exploitation in the next 30 days; higher than 44% of CVEs (scores of 2026-10-25)
CWEs: CWE-20, CWE-22, CWE-73
Published: 2026-07-21
Modified: 2026-10-24
Record from: the NVD, synced 2026-10-25

Affected

progress:sharefile_storage_zones_controller

References

https://support.sharefile.com/s/article/ShareFile-Storage-Zone-Controller-SZC-Service-Disruption-Guidance-Login-Issues-and-Access-Information

Check your stack JSON