CVE-2026-93693

MEDIUM Status: Received

CVSS Scores

CVSS v3.x Base Score
6.5
MEDIUM

Description

In Progress ShareFile Storage Zones Controller v5.12.6 and below, improper validation of outbound request destinations and parameters, unsafe JSONP response formatting, and insufficient validation on queue service can be chained by a remote unauthenticated attacker to issue server-side requests to unintended local handlers and perform unauthorized queue operations.

Published
October 12, 2026 1:17 PM
Last Modified
October 12, 2026 3:17 PM
Source
[email protected]

Weaknesses (CWE)

CWE-20 CWE-116 CWE-306 CWE-918

References

Contact Us

Get the CyboWatch SIEM platform, hosting, and 24×7 SOC analysts. Send an enquiry, or call or email us to get started.

Send an enquiry