Progress tells ShareFile Storage Zone Controller customers to shut down on-premises servers over a credible security threat

Progress told organizations using ShareFile Storage Zone Controllers to immediately shut down the Windows servers running them because of a credible external security threat. The affected component is the on-premises Storage Zone Controller used in hybrid ShareFile deployments, where internet-facing servers handle file transfers between local storage and the ShareFile cloud. Progress says it has temporarily disabled access for affected accounts and has not yet disclosed a CVE, attack method, or confirmed compromise.

Why it matters: This is a high-urgency situation for organizations that run ShareFile with on-premises Storage Zone Controllers, because the vendor says disabling cloud access alone is not enough and manual server shutdown is required. Affected admins should treat this as an emergency mitigation, isolate or power down those servers, and watch for vendor updates within 24 hours.

Sources

Progress Confirms Zero-Day Vulnerability Behind ShareFile Disruption

Ionut Arghire 2026.07.15 98% relevant

This directly updates the same ShareFile incident by confirming the credible threat was a zero-day vulnerability, stating patched versions are now available for affected 5.x and 6.x Storage Zones Controller systems, access has been restored for patched customers, and sharing vendor language that the flaw is a path traversal issue affecting authenticated administrative users.

Progress confirms ShareFile zero-day flaw behind Storage Zone shutdown

Lawrence Abrams 2026.07.14 98% relevant

This directly updates the same ShareFile Storage Zone Controller emergency event by confirming the underlying issue was a high-severity zero-day path traversal flaw, adding affected versions (all 5.x and 6.x), impact details, and the newly released fixed versions 5.12.5 and 6.0.2.

URGENT - Progress Tells ShareFile Customers to Shut Down Storage Zone Controllers Over Security Threat

info@thehackernews.com (The Hacker News) 2026.07.10 99% relevant

This article is a direct report on the same Progress ShareFile emergency warning, reiterating that organizations running on-premises Storage Zone Controllers should take them offline immediately due to a credible security threat.

Progress urges ShareFile admins to shut down servers over “credible” threat

Lawrence Abrams 2026.07.10 100% relevant

This article appears to be the first concrete report of Progress warning ShareFile Storage Zone Controller customers about a credible active threat and directing immediate shutdown of affected on-premises servers.