PT-2026-61982 · Progress · Sharefile Storagezones Controller

CVE-2026-15724 · Publicado 2026-07-21 · Atualizado 2026-07-21

Mitre

CVSS v3.1

8.7

Alta

Vetor base

AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:N

In Progress ShareFile Storage Zones Controller versions prior to 5.12.5 and 6.0.2, an authenticated administrative user can exploit a path traversal vulnerability to read arbitrary files from the server filesystem, write files to arbitrary directories, or determine whether specific files exist on the server.

Correção

Path traversal

RCE

Enumeração de Fraquezas

CWE-22

CWE-20

CWE-73

Identificadores relacionados

CVE-2026-15724

Produtos afetados

Sharefile Storagezones Controller

Referências · 2

• https://support.sharefile.com/s/article/ShareFile-Storage-Zone-Controller-SZC-Service-Disruption-Guidance-Login-Issues-and-Access-Information · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2026-15724 · Nota de Segurança