CVE Feed

    Dashboard / CVE / CVE-2026-93694

    CVE-2026-93694

    In Progress ShareFile Storage Zones Controller v5.12.6 and below, processing of queue items can send acknowledgements to an unvalidated callback URL, this behavior together with a race condition allows the attacker to cause FileCopyService to consume attacker-controlled metadata and content. Exploitation requires control over copy queue work and a race condition.

    Published:Oct 12, 2026
    Last Modified:Oct 12, 2026
    EPS:Oct 12, 2026
    EPSS Score:
    CVSS Score:4

    Affected Products

    Vendor
    Progress
    Product
    Sharefile Storage Zones Controller

    Exploits

    No exploit reference

    Related CVEs

    CVE-2026-93695 (CVSS 7.4) — In Progress ShareFile Storage Zones Controller v5.12.6 and below, FileCopyService uses a remote file identifie…
    CVE-2026-93693 (CVSS 6.5) — In Progress ShareFile Storage Zones Controller v5.12.6 and below, improper validation of outbound request dest…
    CVE-2026-16137 (CVSS 7.2) — In Progress ShareFile Storage Zones Controller v5.12.5 and below, a party with valid zone credentials can perf…
    CVE-2026-16138 (CVSS 8) — In Progress ShareFile Storage Zones Controller v5.12.5 and below versions, unsafe deserialization of untrusted…
    CVE-2026-16139 (CVSS 7.2) — In Progress ShareFile Storage Zones Controller versions <= 5.12.5 and <= 6.0.2, an authenticated zone administ…
    CVE-2026-15724 (CVSS 8.7) — In Progress ShareFile Storage Zones Controller versions prior to 5.12.5 and 6.0.2, an authenticated administra…
    CVE-2026-2701 (CVSS 9.1) — Authenticated user can upload a malicious file to the server and execute it, which leads to remote code execut…
    CVE-2026-2699 (CVSS 9.8) — Customer Managed ShareFile Storage Zones Controller (SZC) allows an unauthenticated attacker to access restric…

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High