MEDIUM 4.0 NVD

CVE-2026-93694

In Progress ShareFile Storage Zones Controller v5.12.6 and below, processing of queue items can send acknowledgements to an unvalidated callback URL, this behav

In Progress ShareFile Storage Zones Controller v5.12.6 and below, processing of queue items can send acknowledgements to an unvalidated callback URL, this behavior together with a race condition allows the attacker to cause FileCopyService to consume attacker-controlled metadata and content. Exploitation requires control over copy queue work and a race condition.

References

https://docs.sharefile.com/en-us/sharefile/storage-zones-controller/5-0/security-vulnerabi

Published: 2026-10-12 · Source: NVD · Feed updated: 2026-10-12

This medium severity vulnerability with a CVSS score of 4.0 was published on 2026-10-12 via NVD.

vulnfeed aggregates 10929 vulnerabilities from NVD, CISA KEV, Ubuntu, Debian, Red Hat, Kubernetes, Exploit-DB, OSS-Security, GitHub and OpenStack — updated every 4 hours.