← Back to browse · API

CVE-2026-25108

Severity
HIGH
CVSS
8.7
EPSS
0.04979
Risk score
61.54
CISA KEV
Yes
PoC
No
Published
2026-02-13
Modified
2026-02-26
First seen
2026-08-07
Aliases
EUVD-2026-6172, GHSA-QGQM-FPVV-JGFH
Products
Soliton Systems K.K.:FileZen V4.2.1 to V4.2.8, Soliton Systems K.K.:FileZen V5.0.0 to V5.0.10, Soliton Systems K.K:FileZen
Sources
cisa.gov CVE-2026-25108
euvd EUVD-2026-6172

Description

FileZen contains an OS command injection vulnerability. When FileZen Antivirus Check Option is enabled, a logged-in user may send a specially crafted HTTP request to execute an arbitrary OS command.

References