{"schemaVersion":3,"id":"CVE-2026-93694","aliases":[],"status":"published","duplicateOf":null,"title":null,"description":"In Progress ShareFile Storage Zones Controller v5.12.6 and below, processing of queue items can send acknowledgements to an unvalidated callback URL, this behavior together with a race condition allows the attacker to cause FileCopyService to consume attacker-controlled metadata and content. Exploitation requires control over copy queue work and a race condition.","dates":{"published":"2026-10-12T12:50:22.621Z","modified":"2026-10-12T14:43:50.913Z","reserved":null,"kevAdded":[],"kevDue":[]},"cvss":{"headline":{"score":4,"severity":"medium","version":"3.1","versionLabel":"v3.1","source":"NVD","vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:L","computed":false,"selection":"backend-summary"},"metrics":[{"version":"3.1","versionLabel":"v3.1","source":"NVD","score":4,"severity":"medium","vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:L","exploitability":null,"impact":null,"computed":false},{"version":"3.1","versionLabel":"v3.1","source":"CVE.org","score":4,"severity":"medium","vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:L","exploitability":null,"impact":null,"computed":false}]},"epss":{"probability":0.00072,"percentile":0.00053,"severity":"low","asOf":"2026-10-20T00:00:00.000Z","change":{"pp":null,"baselineDate":null,"baselineScore":null},"history":[{"date":"2026-10-13T00:00:00.000Z","score":0.00072,"percentile":null},{"date":"2026-10-14T00:00:00.000Z","score":0.00072,"percentile":null},{"date":"2026-10-15T00:00:00.000Z","score":0.00072,"percentile":null},{"date":"2026-10-16T00:00:00.000Z","score":0.00072,"percentile":null},{"date":"2026-10-17T00:00:00.000Z","score":0.00072,"percentile":null},{"date":"2026-10-18T00:00:00.000Z","score":0.00072,"percentile":null},{"date":"2026-10-19T00:00:00.000Z","score":0.00072,"percentile":null},{"date":"2026-10-20T00:00:00.000Z","score":0.00072,"percentile":0.00053}],"last30":[{"date":"2026-10-13T00:00:00.000Z","score":0.00072,"percentile":null},{"date":"2026-10-14T00:00:00.000Z","score":0.00072,"percentile":null},{"date":"2026-10-15T00:00:00.000Z","score":0.00072,"percentile":null},{"date":"2026-10-16T00:00:00.000Z","score":0.00072,"percentile":null},{"date":"2026-10-17T00:00:00.000Z","score":0.00072,"percentile":null},{"date":"2026-10-18T00:00:00.000Z","score":0.00072,"percentile":null},{"date":"2026-10-19T00:00:00.000Z","score":0.00072,"percentile":null},{"date":"2026-10-20T00:00:00.000Z","score":0.00072,"percentile":0.00053}]},"kev":{"state":"not-listed","entries":[],"listedCount":0,"totalCatalogs":3,"catalogs":[{"source":"cisa","label":"CISA","listed":false,"entry":null},{"source":"enisa","label":"ENISA","listed":false,"entry":null},{"source":"circl","label":"CIRCL","listed":false,"entry":null}]},"ransomware":{"state":"none-recorded","sources":[]},"exploits":[],"exploitCount":0,"weaknesses":[{"id":"CWE-321","name":"Use of Hard-coded Cryptographic Key","description":"The product uses a hard-coded, unchangeable cryptographic key.","type":"weakness","status":"Draft","abstraction":"Variant","likelihoodOfExploit":"High","url":"https://cwe.mitre.org/data/definitions/321.html"},{"id":"CWE-362","name":"Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')","description":"The product contains a concurrent code sequence that requires temporary, exclusive access to a shared resource, but a timing window exists in which the shared resource can be modified by another code sequence operating concurrently.","type":"weakness","status":"Draft","abstraction":"Class","likelihoodOfExploit":"Medium","url":"https://cwe.mitre.org/data/definitions/362.html"},{"id":"CWE-918","name":"Server-Side Request Forgery (SSRF)","description":"The web server receives a URL or similar request from an upstream component and retrieves the contents of this URL, but it does not sufficiently ensure that the request is being sent to the expected destination.","type":"weakness","status":"Incomplete","abstraction":"Base","likelihoodOfExploit":null,"url":"https://cwe.mitre.org/data/definitions/918.html"}],"affected":[{"vendor":"progress","product":"sharefile storage zones controller","name":"ShareFile Storage Zones Controller","label":"sharefile storage zones controller","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"≤ 5.12.6","noFixRecorded":false,"fixedIn":null}],"versionsText":"≤ 5.12.6","eol":null,"hubHref":"/vendor/progress/sharefile_storage_zones_controller"}],"affectedCount":1,"eol":{"hasEol":false,"count":0},"references":[{"url":"https://docs.sharefile.com/en-us/sharefile/storage-zones-controller/5-0/security-vulnerability-sep26","label":"docs.sharefile.com/en-us/sharefile/storage-zones-controller/5-0/security-vulnerability-sep26","hostname":"docs.sharefile.com","tags":["Vendor Advisory"]}],"lineage":{"upstream":[],"downstream":[],"duplicates":[],"related":[]},"timeline":[{"kind":"published","date":"2026-10-12T12:50:22.621Z","label":"Published","detail":"Vulnerability first disclosed.","source":null},{"kind":"modified","date":"2026-10-12T14:43:50.913Z","label":"Last modified","detail":"Vulnerability information updated.","source":null}],"risk":{"score":16,"level":"low","profile":"Default","thresholds":{"critical":75,"high":50,"medium":25,"low":10}},"meta":{"dataAsOf":"2026-10-21T03:25:05.252Z","stale":false,"partial":false}}