CVE Feed

    Dashboard / CVE / CVE-2026-93695

    CVE-2026-93695

    In Progress ShareFile Storage Zones Controller v5.12.6 and below, FileCopyService uses a remote file identifier when constructing a local temporary file path without enforcing containment. This can cause FileCopyService to write attacker-controlled content to filesystem locations writable by the service account. This can result in remote code execution when an executable IIS-served directory is writable.

    Published:Oct 12, 2026
    Last Modified:Oct 12, 2026
    EPS:Oct 12, 2026
    EPSS Score:
    CVSS Score:7.4

    Affected Products

    Vendor
    Progress
    Product
    Sharefile Storage Zones Controller

    Exploits

    No exploit reference

    Related CVEs

    CVE-2026-93694 (CVSS 4) — In Progress ShareFile Storage Zones Controller v5.12.6 and below, processing of queue items can send acknowled…
    CVE-2026-93693 (CVSS 6.5) — In Progress ShareFile Storage Zones Controller v5.12.6 and below, improper validation of outbound request dest…
    CVE-2026-16137 (CVSS 7.2) — In Progress ShareFile Storage Zones Controller v5.12.5 and below, a party with valid zone credentials can perf…
    CVE-2026-16138 (CVSS 8) — In Progress ShareFile Storage Zones Controller v5.12.5 and below versions, unsafe deserialization of untrusted…
    CVE-2026-16139 (CVSS 7.2) — In Progress ShareFile Storage Zones Controller versions <= 5.12.5 and <= 6.0.2, an authenticated zone administ…
    CVE-2026-15724 (CVSS 8.7) — In Progress ShareFile Storage Zones Controller versions prior to 5.12.5 and 6.0.2, an authenticated administra…
    CVE-2026-2701 (CVSS 9.1) — Authenticated user can upload a malicious file to the server and execute it, which leads to remote code execut…
    CVE-2026-2699 (CVSS 9.8) — Customer Managed ShareFile Storage Zones Controller (SZC) allows an unauthenticated attacker to access restric…

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High