Skip to content
CVE PROGRAM SOURCE RECORD8.0 High

CVE-2026-16138

Remote code execution via unsafe deserialization in Progress ShareFile Storage Zones Controller's CICO service

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
ProgressSoftware

Description

In Progress ShareFile Storage Zones Controller v5.12.5 and below versions, unsafe deserialization of untrusted file metadata can allow a user with write access to a Network share to execute arbitrary code on the Storage Zones Controller host.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Progress ShareFile Storage Zones Controller

Default version status: unaffected

  • 0 to ≤ 5.12.5affected

References