CVE-2026-93695
Received Received - Intake

Path Traversal in Progress ShareFile Storage Zones Controller

Publication date: 2026-10-12

Last updated on: 2026-10-12

Assigner: Progress Software Corporation

Description
In Progress ShareFile Storage Zones Controller v5.12.6 and below, FileCopyService uses a remote file identifier when constructing a local temporary file path without enforcing containment. This can cause FileCopyService to write attacker-controlled content to filesystem locations writable by the service account. This can result in remote code execution when an executable IIS-served directory is writable.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-10-12
Last Modified
2026-10-12
Generated
2026-10-12
AI Q&A
2026-10-12
EPSS Evaluated
N/A
NVD
CVE-2026-93695
EUVD
EUVD-2026-97367

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
Progress ShareFile Storage Zones Controller 0

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-22 The product uses external input to construct a pathname that is intended to identify a file or directory that is located underneath a restricted parent directory, but the product does not properly neutralize special elements within the pathname that can cause the pathname to resolve to a location that is outside of the restricted directory.
CWE-73 The product allows user input to control or influence paths or file names that are used in filesystem operations.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This vulnerability exists in Progress ShareFile Storage Zones Controller versions 5.12.6 and below. The FileCopyService component uses a remote file identifier to create a local temporary file path without proper containment checks. This allows an attacker to write malicious content to filesystem locations accessible by the service account, potentially leading to remote code execution if the directory is writable and served by IIS.

Detection Guidance
  • Check for unauthorized file writes in IIS-served directories by monitoring file system changes in directories writable by the ShareFile service account.
  • Inspect network traffic for unusual requests to the connector SSO endpoint or internal service endpoints, particularly those involving file copy operations.
  • Review logs for any attempts to manipulate queue operations or forge acknowledgements in the ShareFile Storage Zones Controller.
  • Verify that the ShareFile Storage Zones Controller is updated to version 5.12.7 or later to ensure the vulnerability is patched.
Impact Analysis

An attacker could exploit this to execute arbitrary code on the affected system with the privileges of the service account. This may allow unauthorized access to sensitive data, system compromise, or further network infiltration depending on the service account permissions.

Compliance Impact

This vulnerability could lead to unauthorized data access or exfiltration, violating confidentiality requirements in GDPR and HIPAA. Organizations may face compliance violations, fines, or legal consequences if exploited.

Mitigation Strategies

Upgrade Progress ShareFile Storage Zones Controller to a version above v5.12.6 to address the file path containment issue. Ensure the service account running FileCopyService does not have write permissions to executable IIS-served directories.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-93695. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart