A High-Severity Vulnerability Forces ShareFile to Shut Down Storage Zone Controllers, Urges Customers to Patch Immediately
Progress Software has confirmed that a high-severity zero-day vulnerability is behind the sudden shutdown of ShareFile Storage Zone Controllers last week. The company acted out of caution after receiving information from a credible source about a potential threat and temporarily disabled access to all ShareFile accounts using Storage Zone Controllers while it investigated the incident with cybersecurity experts.
The investigation revealed a critical path traversal vulnerability affecting all 5.x and 6.x versions of ShareFile Storage Zone Controller, which allows an authenticated administrative user to read arbitrary files, write malicious content to directories, or enumerate the server filesystem layout. This type of vulnerability is particularly concerning because it can be exploited by attackers to gain unauthorized access to sensitive data.
Storage Zone Controllers are customer-managed Windows servers that allow organizations to keep files on-premises while continuing to use ShareFile’s cloud platform for authentication, permissions, auditing, and collaboration. These servers contain the files transferred using the system, making them a valuable target for extortion gangs in data theft attacks.
Progress has released security updates, versions 5.12.5 and 6.0.2 of the ShareFile Storage Zone Controller, which customers are urged to install as soon as possible. Once the updates are installed, Storage Zone Controllers can be brought back online. Notably, Progress claims that there is no indication that customers were breached, but this has not been officially confirmed.
It’s worth noting that Progress typically waits for two weeks before publishing a CVE identifier for vulnerabilities it discovers internally, allowing customers time to patch before details become public and available to potential threat actors. This practice reflects the company’s commitment to minimizing the risk of exploitation while still providing timely security updates to its customers.
The discovery of this vulnerability serves as a stark reminder that even seemingly secure systems can be vulnerable to attack. It’s essential for organizations to regularly test their defenses, patch vulnerabilities promptly, and stay vigilant in the face of emerging threats. By doing so, they can significantly reduce the risk of successful attacks and protect sensitive data from unauthorized access.
In light of this incident, it is crucial for ShareFile customers to take immediate action and apply the latest security updates to prevent potential exploitation. This serves as a timely reminder that even seemingly secure systems can be vulnerable to attack.
Source: Bleeping Computer — 2026-07-14