CVE-2026-93694

Progress ShareFile Storage Zones Controller version v5.12.6 and below is vulnerable to a flaw where processing queue items can send acknowledgments to an unvalidated callback URL . When combined with a race condition , this allows an attacker to cause the FileCopyService to consume attacker-contr...

CVE-2026-93694: Server-Side Request Forgery (SSRF)

In Progress ShareFile Storage Zones Controller v5.12.6 and below, processing of queue items can send acknowledgements to an unvalidated callback URL, this behavior together with a race condition allows the attacker to cause FileCopyService to consume attacker-controlled metadata and content...