CVE-2026-16137

Progress ShareFile Storage Zones Controller v5.12.5 and below is vulnerable to path traversal via the resumable upload initiation endpoint, where unsanitized upload filenames allow authenticated users with zone credentials to write arbitrary files to any application-service-account-writable path,...