Vulnerabilities
Vulnerable Software

Vulnerability Details CVE-2026-16139

In Progress ShareFile Storage Zones Controller versions <= 5.12.5 and <= 6.0.2, an authenticated zone administrator can exploit improper validation in the download preparation flow, enabling attacker-controlled files to be written outside the intended preparation directory. This can lead to remote code execution in v5 versions. Remote code execution is not confirmed on v6 versions.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.007
EPSS Ranking 48.8%
CVSS Severity
CVSS v3 Score 7.2
Products affected by CVE-2026-16139


Contact Us

Shodan ® - All rights reserved