In Progress ShareFile Storage Zones Controller Vulnerability Exposes Sensitive Data

CVE-2026-93694

What is CVE-2026-93694?

A vulnerability in In Progress ShareFile Storage Zones Controller versions 5.12.6 and earlier allows an attacker to exploit the processing of queue items by sending acknowledgements to an unvalidated callback URL. This, in conjunction with a race condition, could permit an attacker to manipulate the FileCopyService, potentially leading to the consumption of metadata and content controlled by the attacker. Successful exploitation necessitates prior control over the copy queue work and the occurrence of a race condition.

References