{"uuid": "be1e1017-66ca-4b30-a253-ac8aa13e620a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2026-25108", "type": "exploited", "source": "https://t.me/thehackernews/8479", "content": "\ud83d\udea8 CISA added CVE-2026-25108 to its KEV list after active exploitation. The FileZen bug allows an authenticated user to execute OS commands via crafted HTTP requests.\n\nImpacts versions 4.2.1\u20134.2.8 and 5.0.0\u20135.0.10 when Antivirus Check is enabled. At least one incident confirmed.\n\n\ud83d\udd17 Read \u2192 https://thehackernews.com/2026/02/cisa-confirms-active-exploitation-of.html", "creation_timestamp": "2026-02-25T05:41:21.000000Z"}