Progress Confirms ShareFile Zero-Day Flaw Behind Storage Zone Shutdown

Progress Software issued an emergency shutdown for on-prem ShareFile Storage Zone Controllers on July 10, 2026 after confirming a high-severity path traversal zero-day that allowed an authenticated admin to read/write arbitrary files and enumerate server filesystems; emergency patches (5.12.5 and 6.0.2) were released July 14 and cloud SaaS customers were unaffected. The advisory notes honeypot detections during the exposure window, provides investigative commands and containment guidance, and urges immediate patching, forensic review for IOCs, and hardening of SZC deployments.