vulnti.work

Soliton Systems K.K FileZen OS Command Injection Vulnerability

High Listed in CISA KEV
CVECVE-2026-25108
First seen2026-02-24 00:00 UTC
Disclosed2026-02-24 00:00 UTC
Last updated2026-07-14 20:00 UTC
Channel statuspending_review

Summary

Soliton Systems K.K FileZen contains an OS command injection vulnerability when an user logs-in to the affected product and sends a specially crafted HTTP request.

In-depth triage · Auto channel

No in-depth report has been generated yet (DR-003 v2 AI pipeline is under construction).

Affected products

  • Soliton Systems K.K:FileZen

Sources

  • CISA KEV DATABASE

Original Links

Timeline

  1. kev_added CISA KEV
  2. kev_ingest CISA KEV