Back Cybersecuritynews

FileZen File Transfer App Vulnerability Enables Arbitrary Command Execution

Cybersecuritynews •Abinaya • February 16, 2026

A critical vulnerability has been discovered in the file transfer solution from Soliton Systems K.K., potentially allowing attackers to execute arbitrary system commands on affected installations. The issue, tracked as CVE-2026-25108, has been assessed with a CVSS v3.0 base score of 8.8, indicating a severe command injection flaw. The flaw stems from an OS command injection vulnerability (CWE-78) within […]

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Critical Vulnerability in FileZen App Allows Arbitrary Command Execution A critical vulnerability, tracked as CVE-2026-25108, has been identified in the FileZen file transfer application from Soliton Systems K.K. This OS command injection flaw has a CVSS v3.0 base score of 8.8, allowing attackers to execute arbitrary commands on affected systems. The vulnerability was published on February 13, 2026. 4 sources 30

Extracted Entities

FileZen File Transfer App Vulnerability Enables Arbitrary Command Execution

The full story

Extracted Entities

Attack Types (1)

CVEs (1)

MITRE ATT&CK (1)