CVE-2026-15724 | BDVDB-2026-350195 Detail
ProgressShareFile Storage Zones Controller
Description#
In Progress ShareFile Storage Zones Controller versions prior to 5.12.5 and 6.0.2, an authenticated administrative user can exploit a path traversal vulnerability to read arbitrary files from the server filesystem, write files to arbitrary directories, or determine whether specific files exist on the server.
Impact#
An authenticated administrative user can read arbitrary files accessible to the application's service account, write attacker-controlled content to arbitrary directories, or enumerate the server filesystem layout.
Weaknesses#
References#
Exploit#
No public exploit known
History#
- Version 1Record published in the CVE List.
- Version 2Most recent update recorded in the CVE List.