CVE-2026-93693

6.5 Moyenne

Publiée le 12/10/2026 à 15:17 · Modifiée le 15/10/2026 à 18:08 · En attente d'analyse NVD · Source : security@progress.com

Description

In Progress ShareFile Storage Zones Controller v5.12.6 and below, improper validation of outbound request destinations and parameters, unsafe JSONP response formatting, and insufficient validation on queue service can be chained by a remote unauthenticated attacker to issue server-side requests to unintended local handlers and perform unauthorized queue operations.

Traduire en français

Produits concernés

Progress ShareFile Storage Zones Controller

Scores CVSS

Version	Score	Source	Vecteur
3.1	6.5 Moyenne	security@progress.com	`CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L`

Faiblesses (CWE)

CWE-20
CWE-116
CWE-306
CWE-918

Références

https://docs.sharefile.com/en-us/sharefile/storage-zones-controller/5-0/security-vulnerability-sep26

Ailleurs

NVD
CVE.org
CIRCL Vulnerability-Lookup
CERT-FR
GitHub Advisories