Medium severity4.0NVD Advisory· Published Oct 12, 2026
CVE-2026-93694
CVE-2026-93694
Description
In Progress ShareFile Storage Zones Controller v5.12.6 and below, processing of queue items can send acknowledgements to an unvalidated callback URL, this behavior together with a race condition allows the attacker to cause FileCopyService to consume attacker-controlled metadata and content. Exploitation requires control over copy queue work and a race condition.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
1- Range: <=5.12.6
Patches
Vulnerability mechanics
References
1News mentions
0No linked articles in our index yet.