Actively exploited vulnerabilities affecting Soliton Systems K.K products.https://wildfortech.comhttps://wildfortech.com/security#CVE-2026-25108https://wildfortech.com/security#CVE-2026-25108FileZen, a file-sharing appliance from Soliton Systems, contains an OS command injection flaw that can be triggered after a user logs in and sends a specially crafted HTTP request. This means an authenticated attacker could execute arbitrary operating system commands on the underlying server, potentially leading to full system compromise, data theft, or use as a pivot point within the network. The vulnerability has been added to CISA's Known Exploited Vulnerabilities catalog, indicating active exploitation.Tue, 24 Feb 2026 00:00:00 GMTSoliton Systems K.KFileZen