Skip to content
OpenAdvisories
High · 8.8 Known exploited CVE-2026-25108 EUVD-2026-6172GHSA-qgqm-fpvv-jgfh

FileZen contains an OS command injection vulnerability. When FileZen Antivirus Check Option is enabled, a logged-in user may send a special…

Published Feb 13, 2026 · Updated Feb 26, 2026 · Assigned by jpcert

Vendor: Soliton Systems K.K. Product: FileZen

Description

FileZen contains an OS command injection vulnerability. When FileZen Antivirus Check Option is enabled, a logged-in user may send a specially crafted HTTP request to execute an arbitrary OS command.

Affected products

VendorProductAffectedFixed
Soliton Systems K.K. FileZen V5.0.0 to V5.0.10, V4.2.1 to V4.2.8 —

References