CISA Warns of Active Exploitation of FileZen Vulnerability

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

CISA Confirms Active Exploitation of FileZen Vulnerability CVE-2026-25108 CISA has confirmed that threat actors are actively exploiting a critical vulnerability in FileZen by Soliton Systems K.K., tracked as CVE-2026-25108. This flaw, which has a CVSS v4 score of 8.7, was added to the Known Exploited Vulnerabilities (KEV) catalog on February 24, 2026, due to its high risk. 5 sources 35