CVE-2026-16138 — Remote code execution via unsafe deserialization in Progress ShareFile Storage Zones Controller's CICO service
In Progress ShareFile Storage Zones Controller v5.12.5 and below versions, unsafe deserialization of untrusted file metadata can allow a user with write access to a Network shar…
Published: 2026-08-17 · CVSS: 8.0 · CVSS 3.1
In Progress ShareFile Storage Zones Controller v5.12.5 and below versions, unsafe deserialization of untrusted file metadata can allow a user with write access to a Network share to execute arbitrary code on the Storage Zones Controller host.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7