PROGRESS Software confirmed a zero-day vulnerability was responsible for the disruption of its ShareFile Storage Zones Controller service. Access to the service was disabled due to a credible security threat, and the company has since restored access following the release of patched versions to users. The high-severity vulnerability, categorized as a path traversal bug, could be exploited by users with administrative privileges.
While Progress has not reported any compromises, security experts suggest defenders should take the situation seriously and ensure their systems are updated immediately. Questions remain regarding the full extent of the threat and whether undisclosed attacker activity exists.