![CVE-2026-16139: Arbitrary file write via path traversal in Progress ShareFile Storage Zones Controller potentially leading to remote code execution [HIGH] CVSS 7.2 Exploit Intelligence - Recent CVEs / 11h In Progress ShareFile Storage Zones Controller versions <=5.12.5 and <=6.0.2, an authenticated zone administrator can exploit improper validation in the download preparation flow, enabling attacker-controlled files to be written outside the intended preparation directory. This can lead to remot](https://exploit-intel.com/og.png)
Back exploit-intel.com CVE-2026-16139: Arbitrary file write via path traversal in Progress ShareFile Storage Zones Controller potentially leading to remote code execution [HIGH] CVSS 7.2 Exploit Intelligence - Recent CVEs / 11h In Progress ShareFile Storage Zones Controller versions <=5.12.5 and <=6.0.2, an authenticated zone administrator can exploit improper validation in the download preparation flow, enabling attacker-controlled files to be written outside the intended preparation directory. This can lead to remot
Arbitrary file write via path traversal in Progress ShareFile Storage Zones Controller potentially leading to remote code execution
CVE-2026-16139 has a selected CVSS score of 7.2 (high).
In Progress ShareFile Storage Zones Controller versions <= 5.12.5 and <= 6.0.2, an authenticated zone administrator can exploit improper validation in the download preparation flow, enabling attacker-controlled files to be written outside the intended preparation directory. This can lead to remote code execution in v5 versions. Remote code execution is not confirmed on v6 versions.
CISA Coordinator · SSVC 2.0.3 · Evaluated Aug 17, 2026 · Source: CVE List
Default status: unaffected
The full story
This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.
