CVE-2021-22891: Citrix ShareFile Storagezones Controller

Critical severity, CVSS 9.8. EPSS: 1.1% chance of exploitation in the next 30 days.

A missing authorization vulnerability exists in Citrix ShareFile Storage Zones Controller before 5.7.3, 5.8.3, 5.9.3, 5.10.1 and 5.11.18 may allow unauthenticated remote compromise of the Storage Zones Controller.

Affected products

• Citrix ShareFile Storagezones Controller: from 5.7, before 5.7.3 (fixed in 5.7.3); from 5.8, up to and including 5.8.3; from 5.9, before 5.9.3 (fixed in 5.9.3); from 5.10, before 5.10.1 (fixed in 5.10.1); from 5.11, before 5.11.18 (fixed in 5.11.18)

Published 2021-05-27. Last modified 2026-06-17.