Soliton vulnerabilities
Published CVEs affecting Soliton products: 2 record(s), with severity, exploitation and fixes.
CVE-2026-27653
Medium · 6.7
CWE-863 Feb 27, 2026
Incorrect Authorization in Soliton Securebrowser For Onegate
The installers for multiple products provided by Soliton Systems K.K. contain an issue with incorrect default permissions, which may allow arbitrary code to be executed with SYSTEM privileges.
CVE-2026-25108
High · 8.8
KEV High · 55 CWE-78 Feb 13, 2026
Soliton Systems K.K FileZen OS Command Injection Vulnerability
FileZen contains an OS command injection vulnerability. When FileZen Antivirus Check Option is enabled, a logged-in user may send a specially crafted HTTP request to execute an arbitrary OS command.