CVE-2026-93695: CWE-73: External Control of File Name or Path in Progress ShareFile Storage Zones Controller

In Progress ShareFile Storage Zones Controller versions up to 5.12.6, the FileCopyService component constructs local temporary file paths based on remote file identifiers without validating that the path remains within a safe directory. This external control of file name or path (CWE-73) can be exploited by an attacker to write malicious files to locations writable by the service account. If such locations are executable and served by IIS, this can lead to remote code execution. The vulnerability has a CVSS 3.1 score of 7.4, indicating high severity, with attack vector local, high attack complexity, no privileges required, no user interaction, and high impact on confidentiality, integrity, and availability.

An attacker with local access can exploit this vulnerability to write attacker-controlled files to arbitrary writable locations on the filesystem. If the writable location is an IIS-served directory that allows execution, this can result in remote code execution. This compromises system confidentiality, integrity, and availability.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, restrict write permissions for the service account to prevent writing to executable IIS-served directories. Monitor and control local access to the affected system to reduce risk.