The Cybersecurity and Infrastructure Security Agency (CISA) added CVE-2026-25108 to its Known Exploited Vulnerabilities (KEV) Catalog, confirming active exploitation of this flaw in the wild.

Vulnerability Breakdown

• Target: Soliton Systems K.K. FileZen, a secure file transfer appliance.
• Vulnerability Type: OS Command Injection.
• Impact: An authenticated attacker can execute arbitrary commands on the appliance.
• Trigger: The exploit is triggered via specially crafted HTTP requests when the Antivirus Check Option is enabled.

Mandatory Remediation

Per Binding Operational Directive (BOD) 22-01, federal agencies and private organizations are advised to take the following steps:

Compliance Deadline: Organizations should aim to remediate this vulnerability by the deadline specified in the CISA KEV database to prevent potential breaches.

Update Software: Install the latest security patches provided by Soliton Systems.

Temporary Workaround: Disable the Antivirus Check Option if immediate patching is not possible to mitigate the risk of command injection.