Progress Restores Access to ShareFile After Temporary Service Suspension Due to Security Threat
Following a four-day suspension of security services, Progress Software has successfully reinstated access to its ShareFile Storage Zones Controller. This service is integral to Progress’s enterprise file-sharing solution, ShareFile, which allows organizations to store and share files securely.
The temporary suspension of the service was initiated on July 10, after Progress identified what they termed a “credible external security threat.” This prompted the management team to act swiftly in safeguarding user data and ensuring system integrity. After rigorous assessments and remediation measures, services were resumed on July 14.
In a statement to the cybersecurity publication Infosecurity, the company disclosed details about a high-severity path traversal vulnerability that impacted Storage Zones Controller versions 5.x and 6.x. This type of vulnerability allows unauthorized access to directories and files on a server, which could lead to potential data breaches. To address this vulnerability, Progress developed and rolled out patched versions to their customers. They assured users that once these patches were implemented, their respective Storage Zones Controllers would be fully operational again.
The patches have been incorporated into the latest versions of the Storage Zones Controller, specifically versions 5.12.5 and 6.0.2. However, the company has chosen not to disclose any common vulnerabilities and exposures (CVE) identifier associated with this vulnerability at this time. The team emphasized their decision to delay this publication as a means of allowing their customers adequate time to implement the necessary updates before exposing the details to potential cybercriminals.
Progress has reassured its user base by stating that there is currently no evidence suggesting unauthorized access to any ShareFile customer accounts or data. They have also confirmed the absence of any identified active threats. This proactive stance aims to bolster customer confidence during a period often fraught with anxiety concerning data security.
Despite these recent developments, Progress Software has faced scrutiny in the past due to previous security incidents. Notably, in 2023, the company’s MOVEit Transfer product was compromised and exploited as part of widespread ransomware attacks. Additionally, a critical vulnerability in MOVEit Automation was reported in April 2026, leading to further challenges for the company in managing its security protocols. These recurring incidents underscore the importance of vigilant cybersecurity measures in maintaining customer trust and preventing potential attacks.
As companies increasingly rely on cloud storage and file-sharing services, vulnerabilities and security threats pose significant risks. Organizations, such as Progress, are tasked with the continuous challenge of safeguarding sensitive information against evolving cyber threats. This incident serves as a reminder for businesses to prioritize the fortification of their digital infrastructure, ensuring that adequate measures are in place to thwart unauthorized access.
In light of these security challenges, customers are urged to stay informed about the latest updates and patches for their software solutions. Progress’s commitment to transparency and user safety is evident as they work diligently to resolve vulnerabilities and ensure that their platforms remain safe from external threats.
In conclusion, while the temporary suspension of the ShareFile Storage Zones Controller might have raised concerns among users, Progress Software’s prompt response and implementation of security patches reflect their commitment to providing a secure file-sharing environment. With ongoing vigilance and a proactive approach to cybersecurity, the company can continue to enhance the safety of its products while maintaining customer trust in its services.
Moving forward, it will be essential for Progress and similar companies to navigate the complexities of cybersecurity proactively, ensuring that users’ data remains protected against the backdrop of an increasingly sophisticated landscape of cyber threats.