CVE-2026-15724: Path traversal in Progress ShareFile Storage Zones Controller (SZC)
In Progress ShareFile Storage Zones Controller versions prior to 5.12.5 and 6.0.2, an authenticated administrative user can exploit a path traversal vulnerability to read arbitrary files from the server filesystem, write files to arbitrary directories, or determine whether specific files exist on the server.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
Progress ShareFile Storage Zones Controllerto a version that resolves this vulnerability.Fixed in 5.12.5 - Upgrade
Upgrade
Progress ShareFile Storage Zones Controllerto a version that resolves this vulnerability.Fixed in 6.0.2
Event History
Frequently Asked Questions
What is the severity of CVE-2026-15724?
The severity of CVE-2026-15724 is rated high with a CVSS score of 8.7.
How do I fix CVE-2026-15724?
To fix CVE-2026-15724, upgrade Progress ShareFile Storage Zones Controller to versions 5.12.5 or 6.0.2 or later.
What type of vulnerability is CVE-2026-15724?
CVE-2026-15724 is a path traversal vulnerability that allows unauthorized access to the server filesystem.
Who is affected by CVE-2026-15724?
Authenticated administrative users of Progress ShareFile Storage Zones Controller versions prior to 5.12.5 and 6.0.2 are affected by CVE-2026-15724.
What can an attacker do with CVE-2026-15724?
An attacker can exploit CVE-2026-15724 to read arbitrary files, write files to arbitrary directories, and check the existence of specific files on the server.