Skip to content
OpenAdvisories

Vendor

ZSPACE

6 known vulnerabilities.

Products

Q2C NAS 3 Z4Pro+ 3
All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • High 8.8
    CVE-2025-14108 EPSS 10%

    ZSPACE Q2C NAS HTTP POST Request open zfilev2_api.OpenSafe command injection

    A weakness has been identified in ZSPACE Q2C NAS up to 1.1.0210050. Affected by this issue is the function zfilev2_api.OpenSafe of the file /v2/file/safe/open of the component HTTP POST Request Handler. This manipulation of the argument safe_dir causes comman…

    ZSPACE Q2C NAS
  • High 8.8
    CVE-2025-14107 EPSS 12%

    ZSPACE Q2C NAS HTTP POST Request status zfilev2_api.SafeStatus command injection

    A security flaw has been discovered in ZSPACE Q2C NAS up to 1.1.0210050. Affected by this vulnerability is the function zfilev2_api.SafeStatus of the file /v2/file/safe/status of the component HTTP POST Request Handler. The manipulation of the argument safe_d…

    ZSPACE Q2C NAS
  • High 8.8
    CVE-2025-14106 EPSS 12%

    ZSPACE Q2C NAS HTTP POST Request close zfilev2_api.CloseSafe command injection

    A vulnerability was identified in ZSPACE Q2C NAS up to 1.1.0210050. Affected is the function zfilev2_api.CloseSafe of the file /v2/file/safe/close of the component HTTP POST Request Handler. The manipulation of the argument safe_dir leads to command injection…

    ZSPACE Q2C NAS