Improper Validation in Progress ShareFile Storage Zones Controller Leads to Unauthorized Access
CVE-2026-93693

6.5MEDIUM

Key Information:

Vendor

Progress

Status
Sharefile Storage Zones Controller
Vendor
CVE Published:
12 October 2026

What is CVE-2026-93693?

The Progress ShareFile Storage Zones Controller, specifically versions up to v5.12.6, has a vulnerability that allows remote unauthenticated attackers to exploit improper validation of outbound request destinations and parameters. This flaw, coupled with insecure JSONP response formatting and inadequate validation on the queue service, can enable attackers to issue unwanted server-side requests to local handlers. Consequently, unauthorized operations can be performed within the queue, leading to potential data exposure or service disruptions.

Affected Version(s)

ShareFile Storage Zones Controller 0 <= 5.12.6

References

https://docs.sharefile.com/en-us/sharefile/storage-zones-...
vendor-advisory

CVSS V3.1

Score:
6.5
Severity:
MEDIUM
Confidentiality:
None
Integrity:
Low
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.