Soliton Systems K.K.
Products
| Product | CVEs | Exploited | Latest |
|---|---|---|---|
| FileZen | 3 | 1 | Feb 13, 2026 |
| InfoTrace Mark II Malware Protection (Mark II Zerona) | 1 | – | Aug 9, 2023 |
| Soliton SecureBrowser for OneGate | 1 | – | Feb 27, 2026 |
| Soliton SecureBrowser II | 1 | – | Feb 27, 2026 |
| Soliton SecureWorkspace (formerly WrappingBox) | 1 | – | Feb 27, 2026 |
| Zerona / Zerona PLUS | 1 | – | Aug 9, 2023 |
Exploited and recent CVEs
- CVE-2026-25108 FileZen contains an OS command injection vulnerability. When FileZen Antivirus Check Option is enabled, a logged-in user may send a specially crafted HTTP request to execute an arbitrary OS command. 5.2%
- CVE-2026-27653 The installers for multiple products provided by Soliton Systems K.K. contain an issue with incorrect default permissions, which may allow arbitrary code to be executed with SYSTEM privileges. 0.1%
- CVE-2026-27653 The installers for multiple products provided by Soliton Systems K.K. contain an issue with incorrect default permissions, which may allow arbitrary code to be executed with SYSTEM privileges. 0.1%
- CVE-2026-27653 The installers for multiple products provided by Soliton Systems K.K. contain an issue with incorrect default permissions, which may allow arbitrary code to be executed with SYSTEM privileges. 0.1%
- CVE-2023-39341 "FFRI yarai", "FFRI yarai Home and Business Edition" and their OEM products handle exceptional conditions improperly, which may lead to denial-of-service (DoS) condition. Affected products and versi 0.3%
- CVE-2023-39341 "FFRI yarai", "FFRI yarai Home and Business Edition" and their OEM products handle exceptional conditions improperly, which may lead to denial-of-service (DoS) condition. Affected products and versi 0.3%
- CVE-2021-20655 FileZen (V3.0.0 to V4.2.7 and V5.0.0 to V5.0.2) allows a remote attacker with administrator rights to execute arbitrary OS commands via unspecified vectors. 3.9%
- CVE-2020-5639 Directory traversal vulnerability in FileZen versions from V3.0.0 to V4.2.2 allows remote attackers to upload an arbitrary file in a specific directory via unspecified vectors. As a result, an arbitra 4.9%