Fixed Intel

CISA Known Exploited Vulnerability

This vulnerability is actively exploited in the wild and listed in the CISA Known Exploited Vulnerabilities catalog.

Remediation Deadline: Mar 17, 2026

CVE-2026-25108

High
EPSS 18.6%CISA KEV
Soliton Systems K.K/FileZen

Description

Soliton Systems K.K FileZen contains an OS command injection vulnerability when an user logs-in to the affected product and sends a specially crafted HTTP request.

EPSS — Exploit Probability

18.6%

Higher than 95.2% of all CVEs

Required Action

https://jvn.jp/en/jp/JVN84622767/ ; https://nvd.nist.gov/vuln/detail/CVE-2026-25108

Related Articles (1)

Vulnerabilities

CISA Adds One Known Exploited Vulnerability to Catalog

CISA has added one new vulnerability to its Known Exploited Vulnerabilities (KEV) Catalog, based on evidence of active exploitation.

Feb 24, 2026

Risk Assessment

ELEVATED
In CISA KEV

Details

Severity
High
EPSS
18.6%
CISA KEV
Yes
Ransomware
Unknown
Articles
1

Timeline

Published

Feb 24, 2026

Added to KEV

Feb 24, 2026

Remediation Due

Mar 17, 2026

Affected Product

Soliton Systems K.K

FileZen

View all Soliton Systems K.K CVEs

External Links

NVD (NIST)CVE DetailsMITRE CVE