Vulnerabilities

TI-2025-12890 CVE-2025-14108 · GHSA-m8r3-279x-ff46

ZSPACE Q2C NAS HTTP POST Request open zfilev2_api.OpenSafe command injection

MEDIUM 52

A weakness has been identified in ZSPACE Q2C NAS up to 1.1.0210050.

CVSS 4.0HIGH 8.7 Network Low privileges No interaction EPSS 0.10465 Published 2025-12-05 No fix listed CWE-74

TI-2025-12889 CVE-2025-14107 · GHSA-m566-cfc2-crhm

HIGH 73

A security flaw has been discovered in ZSPACE Q2C NAS up to 1.1.0210050.

CVSS 4.0HIGH 8.7 Network Low privileges No interaction EPSS 0.12203 Published 2025-12-05 No fix listed CWE-74

TI-2025-12888 CVE-2025-14106 · GHSA-gcrg-j5vc-rhvg

HIGH 73

A vulnerability was identified in ZSPACE Q2C NAS up to 1.1.0210050.

CVSS 4.0HIGH 8.7 Network Low privileges No interaction EPSS 0.12088 Published 2025-12-05 No fix listed CWE-74