Zspace

6 CVEs across 8 Zspace products. Browse Zspace vulnerabilities, severities, and proof-of-concept exploits.

Zspace products with known CVEs

ProductCVEs
Q2c Nas3
Q2c Nas3
Q2c Nas Firmware3
Z4pro+3
Z4pro\+3
Z4pro\+ Firmware3
Q2c1
Q2c Firmware1
Zspace CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2025-69431Medium6.12026-02-03The ZSPACE Q2C NAS contains a vulnerability related to incorrect symbolic link following. Attackers can format a USB drive to ext4, create a symbolic link to i…
CVE-2025-15133Medium6.32025-12-28A vulnerability was identified in ZSPACE Z4Pro+ 1.0.0440024. The impacted element is the function zfilev2_api_CloseSafe of the file /v2/file/safe/close of the…
CVE-2025-15132Medium6.32025-12-28A vulnerability was determined in ZSPACE Z4Pro+ 1.0.0440024. The affected element is the function zfilev2_api_open of the file /v2/file/safe/open of the compon…
CVE-2025-15131Medium6.32025-12-28A vulnerability was found in ZSPACE Z4Pro+ 1.0.0440024. Impacted is the function zfilev2_api_SafeStatus of the file /v2/file/safe/status of the component HTTP…
CVE-2025-14108High8.82025-12-05A weakness has been identified in ZSPACE Q2C NAS up to 1.1.0210050. Affected by this issue is the function zfilev2_api.OpenSafe of the file /v2/file/safe/open…
CVE-2025-14107High8.82025-12-05A security flaw has been discovered in ZSPACE Q2C NAS up to 1.1.0210050. Affected by this vulnerability is the function zfilev2_api.SafeStatus of the file /v2/…
CVE-2025-14106High8.82025-12-05A vulnerability was identified in ZSPACE Q2C NAS up to 1.1.0210050. Affected is the function zfilev2_api.CloseSafe of the file /v2/file/safe/close of the compo…