Critical FileZen File Transfer Flaw Allows Arbitrary Command Execution

Back Cyberpress

Critical FileZen File Transfer Flaw Allows Arbitrary Command Execution

Cyberpress • February 16, 2026

Share: View original

Tracked as CVE-2026-25108, this OS command injection flaw strikes high with CVSS scores of 8.8 (v3.0) and 8.7 (v4.0).

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Critical Vulnerability in FileZen App Allows Arbitrary Command Execution A critical vulnerability, tracked as CVE-2026-25108, has been identified in the FileZen file transfer application from Soliton Systems K.K. This OS command injection flaw has a CVSS v3.0 base score of 8.8, allowing attackers to execute arbitrary commands on affected systems. The vulnerability was published on February 13, 2026. 4 sources 30

Extracted Entities

Attack Types (1)

Zero-day Exploit

CVEs (1)

MITRE ATT&CK (1)

T1059 - Command and Scripting Interpreter

Platforms (1)