Progress ShareFile Storage Zones Controller 5.12.6 RCE via FileCopyService
CVE-2026-93695 Published on October 12, 2026
Arbitrary file write through remote file identifiers in Progress ShareFile Storage Zones Controller FileCopyService
In Progress ShareFile Storage Zones Controller v5.12.6 and below, FileCopyService uses a remote file identifier when constructing a local temporary file path without enforcing containment. This can cause FileCopyService to write attacker-controlled content to filesystem locations writable by the service account. This can result in remote code execution when an executable IIS-served directory is writable.
Vulnerability Analysis
CVE-2026-93695 can be exploited with local system access, and does not require authorization privileges or user interaction. This vulnerability is consided to have a high level of attack complexity. The potential impact of an exploit of this vulnerability is considered to be very high.
Weakness Types
External Control of File Name or Path
The software allows user input to control or influence paths or file names that are used in filesystem operations.
What is a Directory traversal Vulnerability?
The software uses external input to construct a pathname that is intended to identify a file or directory that is located underneath a restricted parent directory, but the software does not properly neutralize special elements within the pathname that can cause the pathname to resolve to a location that is outside of the restricted directory.
CVE-2026-93695 has been classified to as a Directory traversal vulnerability or weakness.
Affected Versions
Progress ShareFile Storage Zones Controller:- Before and including 5.12.6 is affected.