CVE-2026-25108

High KEV CVSS: 8.7

FileZen contains an OS command injection vulnerability. When FileZen Antivirus Check Option is enabled, a logged-in user may send a specially crafted HTTP request to execute an arbitrary OS command.

Vendor

Soliton

Product

Filezen

CWE

CWE-78

Yayın Tarihi

2026-02-13 04:15:53

Güncelleme

2026-02-24 21:38:18

Source Identifier

vultures@jpcert.or.jp

KEV Date Added

2026-02-24

Kategoriler

CWE-78 Filezen HIGH Soliton 2026

Referanslar

https://jvn.jp/en/jp/JVN84622767/ https://www.soliton.co.jp/support/2026/006657.html https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-25108