CVE-2026-15724 — Path traversal in Progress ShareFile Storage Zones Controller (SZC)

CVE-2026-15724

Path traversal in Progress ShareFile Storage Zones Controller (SZC) PUBLISHED

Description (CNA)

In Progress ShareFile Storage Zones Controller versions prior to 5.12.5 and 6.0.2, an authenticated administrative user can exploit a path traversal vulnerability to read arbitrary files from the server filesystem, write files to arbitrary directories, or determine whether specific files exist on the server.

Affected (CNA)

Vendor / product	Versions
Progress / ShareFile Storage Zones Controller	affected 0 through 5.12.4; affected 6.0.0 through 6.0.1

CWE

CWE-22, CWE-73, CWE-20

References

https://support.sharefile.com/s/article/ShareFile-Storage-Zone-Controller-SZC-Service-Disruption-Guidance-Login-Issues-and-Access-Information

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.