CVE-2026-16138General(progress / sharefile_storage_zones_controller)

LOWCVSS 8.0 · HIGH

Signal is active with 1 mentions in latest observed window

Immediate actions

  • Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

In Progress ShareFile Storage Zones Controller v5.12.5 and below versions, unsafe deserialization of untrusted file metadata can allow a user with write access to a Network share to execute arbitrary code on the Storage Zones Controller host.

0.0/ 10 priority

Sources & remediation

Weakness type (CWE)
CWE-502

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

NONE

Momentum

NONE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

  • sharefile_storage_zones_controller

Threat summary

  • 1 mentions across 1 observed day

What's happening

  • General: 1 classified signal
  • 1 total mentions across 1 day

Affected systems

Vendors
Products
sharefile_storage_zones_controller

Deep dive

Activity timeline1 mentions / 1d
00111Mentions · 2026-09-05: 109-05
Signal classification1 categories
General
1100.0%
Referenced assets1 URL
Full discourse1 post
  • ゆぅさん@YY20424277
    General

    【3軸解説】「Progress Software CorporationのShareFile Storage Zone Controllerにおける信頼できないデータのデシリアライゼーションに関する脆弱性(CVE-2026-16138)」を、背景 / 目的 / 効果 の 3 軸で読み解きます。 背景/目的… ▶ 実践教材(BOOTH): https://www.intect-i.jp/go/booth/?utm_source=sns&utm_medium=social&utm_campaign=booth

    Post summary

    The post offers a 3‑axis explanation of CVE-2026-16138 and links to a BOOTH-based practice resource, but it does not provide actionable PoC, exploit, patch, or detailed technical information.

    0001077
    844 followersView on X
CPE platform detail1 entries

1 of 1 entries

PartVendorProductVersionTarget SWTarget HW
Appprogresssharefile_storage_zones_controller---

Explore more