Soliton Systems K.K FileZen OS Command Injection Vulnerability. Actively exploited: CISA added this vulnerability to its Known Exploited Vulnerabilities catalog on 24/02/2026. Patch affected systems as an emergency.
| Package | Affected versions | Patched versions |
|---|---|---|
| filezen | ≥ 4.2.1, < 5.0.11 | 5.0.11 |
FileZen contains an OS command injection vulnerability. When FileZen Antivirus Check Option is enabled, a logged-in user may send a specially crafted HTTP request to execute an arbitrary OS command.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free