CVE-2026-25108 Soliton Systems K.K. FileZen
FileZen contains an OS command injection vulnerability. When FileZen Antivirus Check Option is enabled, a logged-in user may send a specially crafted HTTP request to execute an arbitrary OS command.
- CVSS
- 8.8 High
- EPSS
- 5.3%
- Percentile
- 93
- Published
- 2026-02-13
- Force
- 10 of 12
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
On CISA’s exploited list
Soliton Systems K.K FileZen OS Command Injection Vulnerability
- Added
- 2026-02-24
- Federal patch deadline
- 2026-03-17
- Ransomware use
- not known