VulnSea

sharefile_storage_zones_controller vulnerabilities

CVEs whose affected-version data names the sharefile_storage_zones_controller package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

3 CVEsRSS

CVE-2026-93695High· 7.4
2w ago

In Progress ShareFile Storage Zones Controller v5.12.6 and below, FileCopyService uses a remote file identifier when constructing a local temporary file path without enforcing containment

In Progress ShareFile Storage Zones Controller v5.12.6 and below, FileCopyService uses a remote file identifier when constructing a local temporary file path without enforcing containment. This can cause FileCopyService to write attacker…

▾ TwilightProgress · ShareFile Storage Zones ControllerEPSS 0.17%via NVD
CVE-2026-93694Medium· 4.0
2w ago

In Progress ShareFile Storage Zones Controller v5.12.6 and below, processing of queue items can send acknowledgements to an unvalidated callback URL, this behavior together with a race condition allows the attacker to cause FileCopyServi…

In Progress ShareFile Storage Zones Controller v5.12.6 and below, processing of queue items can send acknowledgements to an unvalidated callback URL, this behavior together with a race condition allows the attacker to cause FileCopyServi…

▾ SunlitProgress · ShareFile Storage Zones ControllerEPSS 0.07%via NVD
CVE-2026-93693Medium· 6.5
2w ago

In Progress ShareFile Storage Zones Controller v5.12.6 and below, improper validation of outbound request destinations and parameters, unsafe JSONP response formatting, and insufficient validation on queue service can be chained by a rem…

In Progress ShareFile Storage Zones Controller v5.12.6 and below, improper validation of outbound request destinations and parameters, unsafe JSONP response formatting, and insufficient validation on queue service can be chained by a rem…

▾ SunlitProgress · ShareFile Storage Zones ControllerEPSS 0.24%via NVD
sharefile_storage_zones_controller vulnerabilities (CVEs) · VulnSea