{"id":"CVE-2026-16139","aliases":["EUVD-2026-60196","GHSA-7pfv-v2m2-p6x4"],"status":"published","title":"Arbitrary file write via path traversal in Progress ShareFile Storage Zones Controller potentially leading to remote code execution","description":"In Progress ShareFile Storage Zones Controller versions \u003c= 5.12.5 and \u003c= 6.0.2, an authenticated zone administrator can exploit improper validation in the download preparation flow, enabling attacker-controlled files to be written outside the intended preparation directory. This can lead to remote code execution in v5 versions. Remote code execution is not confirmed on v6 versions.","severity":{"version":"3.1","score":7.2,"vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-12","score":0.00935,"percentile":0.61241,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-20","CWE-22","CWE-73"],"published":"2026-08-17T13:31:14Z","modified":"2026-09-02T18:47:18Z","products":[{"vendor":"progress","product":"sharefile storage zones controller"},{"vendor":"progress","product":"sharefile_storage_zones_controller"}],"references":[{"url":"https://support.sharefile.com/s/article/ShareFile-Storage-Zone-Controller-SZC-Service-Disruption-Guidance-Login-Issues-and-Access-Information","tags":["vendor-advisory","Vendor Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-16139"},{"url":"https://github.com/advisories/GHSA-7pfv-v2m2-p6x4"}],"sources":{"cve":[{"id":"CVE-2026-16139","title":"Arbitrary file write via path traversal in Progress ShareFile Storage Zones Controller potentially leading to remote code execution","description":"In Progress ShareFile Storage Zones Controller versions \u003c= 5.12.5 and \u003c= 6.0.2, an authenticated zone administrator can exploit improper validation in the download preparation flow, enabling attacker-controlled files to be written outside the intended preparation directory. This can lead to remote code execution in v5 versions. Remote code execution is not confirmed on v6 versions.","status":"published","published":"2026-08-17T13:31:14.597Z","modified":"2026-08-18T03:55:26.857Z","cvss":[{"version":"3.1","score":7.2,"vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"cna"}],"cwes":["CWE-22","CWE-73","CWE-20"],"updated_at":"2026-11-02T14:20:10.870108Z"}],"euvd":[{"id":"EUVD-2026-60196","description":"In Progress ShareFile Storage Zones Controller versions \u003c= 5.12.5 and \u003c= 6.0.2, an authenticated zone administrator can exploit improper validation in the download preparation flow, enabling attacker-controlled files to be written outside the intended preparation directory. This can lead to remote code execution in v5 versions. Remote code execution is not confirmed on v6 versions.","status":"published","published":"2026-08-17T13:31:14Z","modified":"2026-08-18T03:55:26Z","cvss":[{"version":"3.1","score":7.2,"vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T18:01:47.589712Z"}],"ghsa":[{"id":"GHSA-7pfv-v2m2-p6x4","title":"In Progress ShareFile Storage Zones Controller versions \u003c= 5.12.5 and \u003c= 6.0.2, an authenticated...","description":"In Progress ShareFile Storage Zones Controller versions \u003c= 5.12.5 and \u003c= 6.0.2, an authenticated zone administrator can exploit improper validation in the download preparation flow, enabling attacker-controlled files to be written outside the intended preparation directory. This can lead to remote code execution in v5 versions. Remote code execution is not confirmed on v6 versions.","status":"published","published":"2026-08-17T15:30:39Z","modified":"2026-08-17T15:30:43Z","cvss":[{"version":"3.1","score":7.2,"vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"cwes":["CWE-20"],"updated_at":"2026-11-02T15:10:34.652326Z"}],"nvd":[{"id":"CVE-2026-16139","description":"In Progress ShareFile Storage Zones Controller versions \u003c= 5.12.5 and \u003c= 6.0.2, an authenticated zone administrator can exploit improper validation in the download preparation flow, enabling attacker-controlled files to be written outside the intended preparation directory. This can lead to remote code execution in v5 versions. Remote code execution is not confirmed on v6 versions.","status":"published","published":"2026-08-17T14:20:19.913Z","modified":"2026-09-02T18:47:18.65Z","cvss":[{"version":"3.1","score":7.2,"vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"secondary"}],"cwes":["CWE-20","CWE-22","CWE-73"],"updated_at":"2026-11-02T14:12:38.647684Z"}]}}