CVE 8.8 HIGH

CVE-2026-25108_CVE-2026-25108

8.8 / 10
HIGH
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Description

FileZen contains an OS command injection vulnerability. When FileZen virus check option is enabled, a logged-in user may send a specially crafted HTTP request to execute an arbitrary OS command.

AI Analysis

OS command injection vulnerability in FileZen virus check option

Basic Information

ID CVE-2026-25108
Source jpcert
Published Feb 13, 2026 at 03:39

Affected Product

Vendor Soliton Systems K.K.
Product FileZen
Version V5.0.0 to V5.0.10
Affected Versions Soliton Systems K.K. FileZen V5.0.0 to V5.0.10
Soliton Systems K.K. FileZen V4.2.1 to V4.2.8

CWE Classification

AI Assessment

AI Score 8.8 / 10
AI Severity High
Vendor Soliton Systems K.K.
Product FileZen
Version V4.2.1 to V4.2.8, V5.0.0 to V5.0.10

References

💭 Join the Security Discussion

🔒 Your email address will not be published. Required fields are marked *

⚠️ Please be respectful and constructive in your comments. Security discussions should remain professional.