Skip to content
OpenAdvisories
High WID-SEC-2026-2884 3 CVEs

Citrix Systems ShareFile StorageZones Controller: Mehrere Schwachstellen

Published Aug 17, 2026 · Updated Aug 17, 2026 · de-DE

Vendor: Citrix Product: ShareFile StorageZones Controller Platform: Windows

Summary

Ein Angreifer kann mehrere Schwachstellen in Citrix Systems ShareFile StorageZones Controller ausnutzen, um beliebigen Programmcode auszuführen und Daten zu manipulieren.

Product

Der Citrix ShareFile StorageZones Controller erweitert den ShareFile Software as a Service (SaaS) Cloud Speicher.

Vulnerabilities 3

  • High 8.0
    CVE-2026-16138

    Remote code execution via unsafe deserialization in Progress ShareFile Storage Zones Controller's CICO service

    In Progress ShareFile Storage Zones Controller v5.12.5 and below versions, unsafe deserialization of untrusted file metadata can allow a user with write access to a Network share to execute arbitrary code on the Storage Zones Controller host.

    Progress Software ShareFile Storage Zones Controller
  • High 7.2
    CVE-2026-16137

    Path traversal via unsanitized upload filename leads to arbitrary file write in Progress ShareFile Storage Zones Controller

    In Progress ShareFile Storage Zones Controller v5.12.5 and below, a party with valid zone credentials can perform path traversal using resumable upload initiation endpoint, allowing the party to write arbitrary content to any location writable by the applicat…

    Progress Software ShareFile Storage Zones Controller
  • High 7.2
    CVE-2026-16139

    Arbitrary file write via path traversal in Progress ShareFile Storage Zones Controller potentially leading to remote code execution

    In Progress ShareFile Storage Zones Controller versions <= 5.12.5 and <= 6.0.2, an authenticated zone administrator can exploit improper validation in the download preparation flow, enabling attacker-controlled files to be written outside the intended prepara…

    Progress Software ShareFile Storage Zones Controller

Revision history

  1. #1

    Initiale Fassung

References