PT-2026-61982 · Progress · Sharefile Storagezones Controller

CVE-2026-15724 · Published 2026-07-21 · Updated 2026-07-21

Mitre

CVSS v3.1

8.7

High

Base vector

AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:N

In Progress ShareFile Storage Zones Controller versions prior to 5.12.5 and 6.0.2, an authenticated administrative user can exploit a path traversal vulnerability to read arbitrary files from the server filesystem, write files to arbitrary directories, or determine whether specific files exist on the server.

Fix

Path traversal

RCE

Weakness Enumeration

CWE-22

CWE-20

CWE-73

Related Identifiers

CVE-2026-15724

Affected Products

Sharefile Storagezones Controller

References · 2

• https://support.sharefile.com/s/article/ShareFile-Storage-Zone-Controller-SZC-Service-Disruption-Guidance-Login-Issues-and-Access-Information · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-15724 · Security Note