Progress ShareFile Storage Zones Controller Service Disruption and Authentication Vulnerabilities

72% confidence

Description

Multiple vulnerabilities in Progress ShareFile Storage Zones Controller affecting service availability, login functionality, and access control. The advisory addresses issues in both v5 and v6 versions of the product.

Affected Products

Vendor	Product	Versions
progress	sharefile storage zones	< 5.12.4, < 6.0.1

Related News (1 articles)

Tier B

CCCS Canada32d ago

Progress security advisory (AV26-736)

→ No new info (linked only)

CISA KEV❌ No

Actively exploited❌ No

Patch available

5.12.46.0.1

PublishedJul 22, 2026

Last enriched32d ago

Community Vote

0 upvotes0 downvotes

No votes yet

Related CVEs (5)

HIGHCVE-2026-16139

Arbitrary file write via path traversal in Progress ShareFile Storage Zones Controller potentially leading to remote code execution

Trending: 22

HIGHCVE-2026-16138

Remote code execution via unsafe deserialization in Progress ShareFile Storage Zones Controller's CICO service

Trending: 22

HIGHCVE-2026-16137

Path traversal via unsanitized upload filename leads to arbitrary file write in Progress ShareFile Storage Zones Controller

Trending: 22

CRITICALCVE-2026-8037EXPKEV

OS Command Injection Remote Code Execution Vulnerability in Progress LoadMaster, ECS Connection Manager, Object Scale Connection Manager & MOVEit WAF

Trending: 21

HIGHCVE-2026-59689

Progress LoadMaster, ECS Connection Manager, Object Scale Connection Manager, and MOVEit WAF Improper Authorization Allows Privilege Escalation to Root

Trending: 15

Pin to Dashboard

Verification

State: reported

Confidence: 72%

Vulnerability Timeline

CVE Published

Jul 22, 2026

Patch Available

Jul 22, 2026

Discovered by ZDM

Jul 22, 2026