Firetruck

CVE-2026-25108

KEV
Updated Feb 26, 2026 · PUBLISHED
View KEV entry →

Description

Soliton Systems K.K FileZen contains an OS command injection vulnerability when an user logs-in to the affected product and sends a specially crafted HTTP request.

Full record on cve.org →

Affected packages

PackageVendor / ProductVersion rangeStatus
FileZenSoliton Systems K.K. / FileZenV4.2.1 to V4.2.8affected
FileZenSoliton Systems K.K. / FileZenV5.0.0 to V5.0.10affected