Vulnerability Details CVE-2026-15724
In Progress ShareFile Storage Zones Controller versions prior to 5.12.5 and 6.0.2, an authenticated administrative user can exploit a path traversal vulnerability to read arbitrary files from the server filesystem, write files to arbitrary directories, or determine whether specific files exist on the server.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.005
EPSS Ranking 43.4%
CVSS Severity
CVSS v3 Score 8.7
Products affected by CVE-2026-15724
-
cpe:2.3:a:progress:sharefile_storage_zones_controller:5.0.0
-
cpe:2.3:a:progress:sharefile_storage_zones_controller:5.10
-
cpe:2.3:a:progress:sharefile_storage_zones_controller:5.11
-
cpe:2.3:a:progress:sharefile_storage_zones_controller:5.11.17
-
cpe:2.3:a:progress:sharefile_storage_zones_controller:5.11.18
-
cpe:2.3:a:progress:sharefile_storage_zones_controller:5.11.21
-
cpe:2.3:a:progress:sharefile_storage_zones_controller:5.11.22
-
cpe:2.3:a:progress:sharefile_storage_zones_controller:5.11.23
-
cpe:2.3:a:progress:sharefile_storage_zones_controller:5.11.24
-
cpe:2.3:a:progress:sharefile_storage_zones_controller:5.11.25
-
cpe:2.3:a:progress:sharefile_storage_zones_controller:5.12.0
-
cpe:2.3:a:progress:sharefile_storage_zones_controller:5.12.1
-
cpe:2.3:a:progress:sharefile_storage_zones_controller:5.12.2
-
cpe:2.3:a:progress:sharefile_storage_zones_controller:5.12.3
-
cpe:2.3:a:progress:sharefile_storage_zones_controller:5.12.4
-
cpe:2.3:a:progress:sharefile_storage_zones_controller:5.12.5
-
cpe:2.3:a:progress:sharefile_storage_zones_controller:5.3.1
-
cpe:2.3:a:progress:sharefile_storage_zones_controller:5.4.1
-
cpe:2.3:a:progress:sharefile_storage_zones_controller:5.4.2
-
cpe:2.3:a:progress:sharefile_storage_zones_controller:5.5
-
cpe:2.3:a:progress:sharefile_storage_zones_controller:5.6
-
cpe:2.3:a:progress:sharefile_storage_zones_controller:5.7
-
cpe:2.3:a:progress:sharefile_storage_zones_controller:5.8
-
cpe:2.3:a:progress:sharefile_storage_zones_controller:5.9
-
cpe:2.3:a:progress:sharefile_storage_zones_controller:6.0
-
cpe:2.3:a:progress:sharefile_storage_zones_controller:6.0.1
-
cpe:2.3:a:progress:sharefile_storage_zones_controller:6.0.2