CVE-2026-15724
EUVD-2026-4632521.07.2026, 17:17
In Progress ShareFile Storage Zones Controller versions prior to 5.12.5 and 6.0.2, an authenticated administrative user can exploit a path traversal vulnerability to read arbitrary files from the server filesystem, write files to arbitrary directories, or determine whether specific files exist on the server.Enginsight
Affected Products (NVD)
| Vendor | Product | Version |
|---|---|---|
| progress | sharefile_storage_zones_controller | 𝑥 < 5.12.6 |
| progress | sharefile_storage_zones_controller | 6.0 ≤ 𝑥 < 6.0.3 |
𝑥
= Vulnerable software versions
Common Weakness Enumeration