CVE-2020-5639: Soliton FileZen

Critical severity, CVSS 9.8. EPSS: 5.1% chance of exploitation in the next 30 days.

Directory traversal vulnerability in FileZen versions from V3.0.0 to V4.2.2 allows remote attackers to upload an arbitrary file in a specific directory via unspecified vectors. As a result, an arbitrary OS command may be executed.

Affected products

• Soliton FileZen: from 3.0.0, up to and including 4.2.2

Published 2020-12-14. Last modified 2026-06-17.