PT-2026-76652 · In Progress · Sharefile Storagezones Controller
CVE-2026-16138
·
Published
2026-08-17
·
Updated
2026-09-02
CVSS v3.1
8.0
High
| Vector | AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions
In Progress ShareFile Storage Zones Controller versions prior to 5.12.6
Description
Unsafe deserialization of untrusted file metadata allows a user with write access to a network share to execute arbitrary code on the Storage Zones Controller host. Deserialization is the process of converting a data format, such as JSON or XML, back into an object that can be used by a program.
Recommendations
Update In Progress ShareFile Storage Zones Controller to version 5.12.6 or later.
Fix
Deserialization of Untrusted Data
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Sharefile Storagezones Controller