PT-2026-110578 · Progress · Sharefile Storagezones Controller
CVE-2026-93693
·
Published
2026-10-12
·
Updated
2026-10-12
CVSS v3.1
6.5
Medium
| Vector | AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L |
In Progress ShareFile Storage Zones Controller v5.12.6 and below, improper validation of outbound request destinations and parameters, unsafe JSONP response formatting, and insufficient validation on queue service can be chained by a remote unauthenticated attacker to issue server-side requests to unintended local handlers and perform unauthorized queue operations.
Fix
Improper Encoding or Escaping of Output
Missing Authentication
SSRF
RCE
Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
Sharefile Storagezones Controller