TI-2025-12889 CVE-2025-14107 · GHSA-m566-cfc2-crhm
ZSPACE Q2C NAS HTTP POST Request status zfilev2_api.SafeStatus command injection
Priority HIGH 73
A security flaw has been discovered in ZSPACE Q2C NAS up to 1.1.0210050.
ZSPACE
Records7All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high3CVSS 7.0–8.9
Exploited now
ZSPACE records in CISA KEVNo ZSPACE vulnerabilities are listed in CISA KEV.
Components
Products in the NVD configurations · select one to filter the recordsRecords
7 records
TI-2025-12888 CVE-2025-14106 · GHSA-gcrg-j5vc-rhvg
ZSPACE Q2C NAS HTTP POST Request close zfilev2_api.CloseSafe command injection
Priority HIGH 73
A vulnerability was identified in ZSPACE Q2C NAS up to 1.1.0210050.
TI-2025-42870 CVE-2025-69431 · GHSA-hg9w-23hg-6pfv
The ZSPACE Q2C NAS contains a vulnerability related to incorrect symbolic link following.
Priority MEDIUM 62
The ZSPACE Q2C NAS contains a vulnerability related to incorrect symbolic link following.
TI-2025-13811 CVE-2025-15133 · GHSA-6chc-jx4m-r2w2
ZSPACE Z4Pro+ HTTP POST Request close zfilev2_api_CloseSafe command injection
Priority MEDIUM 57
A vulnerability was identified in ZSPACE Z4Pro+ 1.0.0440024.
TI-2025-13810 CVE-2025-15132 · GHSA-v2w5-94qr-4c5g
ZSPACE Z4Pro+ HTTP POST Request open zfilev2_api_open command injection
Priority MEDIUM 57
A vulnerability was determined in ZSPACE Z4Pro+ 1.0.0440024.
TI-2025-13809 CVE-2025-15131 · GHSA-fvhh-hg59-vfxx
ZSPACE Z4Pro+ HTTP POST Request status zfilev2_api_SafeStatus command injection
Priority MEDIUM 57
A vulnerability was found in ZSPACE Z4Pro+ 1.0.0440024.
TI-2025-12890 CVE-2025-14108 · GHSA-m8r3-279x-ff46
ZSPACE Q2C NAS HTTP POST Request open zfilev2_api.OpenSafe command injection
Priority MEDIUM 52
A weakness has been identified in ZSPACE Q2C NAS up to 1.1.0210050.