CVE-2026-16138
HighCVSS 8.0Exploitation Probability (EPSS)
Low risk17th percentile - higher than 17% of all known CVEs
Summary
In Progress ShareFile Storage Zones Controller v5.12.5 and below, unsafe deserialization of untrusted file metadata can allow a user with write access to a Network share to execute arbitrary code on the Storage Zones Controller host.
Risk Assessment
A user with network share write access could take over the Storage Zones Controller host, potentially compromising data integrity and confidentiality.
Recommendation
Update to a version newer than 5.12.5 and restrict write permissions to network shares.
Original NVD description (English source)
In Progress ShareFile Storage Zones Controller v5.12.5 and below versions, unsafe deserialization of untrusted file metadata can allow a user with write access to a Network share to execute arbitrary code on the Storage Zones Controller host.