DeutschShown in its original language — a full translation is planned for a future version.
Citrix Systems ShareFile StorageZones Controller: Mehrere Schwachstellen
view advisory published 2026-08-17
Ein Angreifer kann mehrere Schwachstellen in Citrix Systems ShareFile StorageZones Controller ausnutzen, um beliebigen Programmcode auszuführen und Daten zu manipulieren.
01
describes (3)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2026-16139US | — | — | ||
In Progress ShareFile Storage Zones Controller versions <= 5.12.5 and <= 6.0.2, an authenticated zone administrator can exploit improper validation in the download preparation flow… | ||||
| CVE-2026-16138US | — | — | ||
In Progress ShareFile Storage Zones Controller v5.12.5 and below versions, unsafe deserialization of untrusted file metadata can allow a user with write access to a Network share t… | ||||
| CVE-2026-16137US | — | — | ||
In Progress ShareFile Storage Zones Controller v5.12.5 and below, a party with valid zone credentials can perform path traversal using resumable upload initiation endpoint, allowin… | ||||
02
references
External citations — patches, advisories, analysis.
- National Vulnerability Database CVE-2026-16137 vom 2026-08-17external
- National Vulnerability Database CVE-2026-16138 vom 2026-08-17external
- National Vulnerability Database CVE-2026-16139 vom 2026-08-17external
- ShareFile Storage Zone Controller Service Disruption Guidance vom 2026-08-17external
- WID-SEC-W-2026-2884 - CSAF Versionself
- WID-SEC-2026-2884 - Portal Versionself
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan