CVE-2026-25108

CISA KEV
ACT NOW Priority: 0.00 BB Relevance: 1/100
Published: N/A Modified: N/A First seen: 2026-10-29 Status: pending_score

Description

Soliton Systems K.K FileZen contains an OS command injection vulnerability when an user logs-in to the affected product and sends a specially crafted HTTP request.

CISA Known Exploited Vulnerability

Vendor / Product Soliton Systems K.K — FileZen
Date Added 2026-02-24
Remediation Due 2026-03-17
https://jvn.jp/en/jp/JVN84622767/ ; https://nvd.nist.gov/vuln/detail/CVE-2026-25108

Bug Bounty Relevance

1 / 100
✓ Known exploited (KEV)

CVSS Score

Unscored

EPSS — Exploitation Probability

5.25%
Raw Score 0.052490
Percentile 92.5%
Date 2026-10-29

EPSS Trend

2026-10-29
0.05249
2026-10-28
0.05249

Intelligence Sources

kev ref →