Progress Software has confirmed that a critical security vulnerability was behind the sudden shutdown of its ShareFile Storage Zone Controllers last week. The company, which provides cloud-based file-sharing services to businesses, took drastic action after receiving warnings from a credible source about a potential external threat.
The investigation revealed a zero-day flaw in the software, allowing an attacker to access and manipulate sensitive files stored on customer-managed Windows servers. These servers, known as Storage Zone Controllers, are used by organizations to manage large file transfers between their premises and the cloud. They contain valuable data that could be exploited by attackers for extortion purposes.
A high-severity path traversal vulnerability was identified in all 5.x and 6.x versions of ShareFile Storage Zone Controller. This means that an authenticated administrative user could, with ease, access any file on the server, write malicious code to any directory, or even map out the entire server’s file system layout. In other words, a well-placed attack could give an attacker complete control over the compromised server.
Progress Software has since released security updates to patch this vulnerability and urges all customers to install them as soon as possible. The company notes that the update process will allow Storage Zone Controllers to be brought back online safely.
Interestingly, Progress claims that there is currently no indication of unauthorized access to any ShareFile customer account or data, nor have they identified any active threats. This might seem reassuring, but it’s essential for customers to understand that this incident highlights the importance of staying vigilant and proactive in cybersecurity.
Storage Zone Controllers are not just passive repositories for files; they are actively used by organizations to manage large-scale file transfers. As such, they become prime targets for attackers looking to exploit sensitive data for financial gain or other malicious purposes. This vulnerability serves as a stark reminder that even well-managed servers can be vulnerable to attack if not properly secured.
To mitigate similar risks in the future, it’s crucial for organizations to regularly test their security layers and detect potential weaknesses before they are exploited by attackers. Regular penetration testing, vulnerability assessments, and breach and attack simulation exercises can help identify areas of improvement and strengthen overall cybersecurity posture.
For now, ShareFile customers should take immediate action to install the latest security updates and ensure that their Storage Zone Controllers are properly secured. As for Progress Software, this incident serves as a wake-up call to review its internal security practices and invest in more robust testing and validation procedures to prevent similar incidents from happening in the future.
Source: Bleeping Computer — 2026-07-14