Description
In Progress ShareFile Storage Zones Controller v5.12.5 and below versions, unsafe deserialization of untrusted file metadata can allow a user with write access to a Network share to execute arbitrary code on the Storage Zones Controller host.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Progress | ShareFile Storage Zones Controller | ≤ 5.12.5 | — |
Advisories 1
- WID-SEC-2026-2884 Citrix Systems ShareFile StorageZones Controller: Mehrere Schwachstellen BSI CERT-Bund (WID) · Aug 17, 2026