Two critical-severity ShareFile vulnerabilities allow remote attackers to bypass authentication and execute arbitrary code.