CVEvulnerability

CVE-2026-16138

8.0 HIGH Published 2026-08-17 Modified 2026-09-02 Official page ↗
Status
Analyzed
Published
2026-08-17
Last modified
2026-09-02
Assigner
[email protected]
CVSS 3.1 ([email protected])
8.0 HIGH — CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Weaknesses
CWE-502

Description

In Progress ShareFile Storage Zones Controller v5.12.5 and below versions, unsafe deserialization of untrusted file metadata can allow a user with write access to a Network share to execute arbitrary code on the Storage Zones Controller host.

Affected configurations

• progress sharefile storage zones controller (< 5.12.6)

Related

Weakness · CWE (1)

  • CWE-502 Deserialization of Untrusted Data weakness

References