CVE-2026-16139

Name of the Vulnerable Software and Affected Versions In Progress ShareFile Storage Zones Controller versions prior to 5.12.6 In Progress ShareFile Storage Zones Controller versions prior to 6.0.3

Description An authenticated zone administrator can exploit improper validation within the download preparation flow. This flaw allows files controlled by an attacker to be written outside the intended preparation directory, which may lead to remote code execution in v5 versions. Remote code execution has not been confirmed for v6 versions.

Recommendations Update In Progress ShareFile Storage Zones Controller to a version later than 5.12.5. Update In Progress ShareFile Storage Zones Controller to a version later than 6.0.2.