8.8
/ 10
HIGH
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Description
FileZen contains an OS command injection vulnerability. When FileZen virus check option is enabled, a logged-in user may send a specially crafted HTTP request to execute an arbitrary OS command.
AI Analysis
OS command injection vulnerability in FileZen virus check option
Basic Information
ID
CVE-2026-25108
Source
jpcert
Published
Feb 13, 2026 at 03:39
Affected Product
Vendor
Soliton Systems K.K.
Product
FileZen
Version
V5.0.0 to V5.0.10
Affected Versions
Soliton Systems K.K. FileZen V5.0.0 to V5.0.10
Soliton Systems K.K. FileZen V4.2.1 to V4.2.8
Soliton Systems K.K. FileZen V4.2.1 to V4.2.8
CWE Classification
AI Assessment
AI Score
8.8 / 10
AI Severity
High
Vendor
Soliton Systems K.K.
Product
FileZen
Version
V4.2.1 to V4.2.8, V5.0.0 to V5.0.10