HIGH 7.4 NVD

CVE-2026-93695

In Progress ShareFile Storage Zones Controller v5.12.6 and below, FileCopyService uses a remote file identifier when constructing a local temporary file path wi

In Progress ShareFile Storage Zones Controller v5.12.6 and below, FileCopyService uses a remote file identifier when constructing a local temporary file path without enforcing containment. This can cause FileCopyService to write attacker-controlled content to filesystem locations writable by the service account. This can result in remote code execution when an executable IIS-served directory is writable.

References

https://docs.sharefile.com/en-us/sharefile/storage-zones-controller/5-0/security-vulnerabi

Published: 2026-10-12 · Source: NVD · Feed updated: 2026-10-12

This high severity vulnerability with a CVSS score of 7.4 was published on 2026-10-12 via NVD.

vulnfeed aggregates 10929 vulnerabilities from NVD, CISA KEV, Ubuntu, Debian, Red Hat, Kubernetes, Exploit-DB, OSS-Security, GitHub and OpenStack — updated every 4 hours.