ZSPACE

Products

ProductCVEsExploitedLatest
Q2C NAS3–Dec 5, 2025
Z4Pro+3–Dec 28, 2025

Exploited and recent CVEs

  • CVE-2025-15133 Medium 6.3 ZSPACE Z4Pro+ HTTP POST Request close zfilev2_api_CloseSafe command injection 7.9%
  • CVE-2025-15132 Medium 6.3 ZSPACE Z4Pro+ HTTP POST Request open zfilev2_api_open command injection 7.6%
  • CVE-2025-15131 Medium 6.3 ZSPACE Z4Pro+ HTTP POST Request status zfilev2_api_SafeStatus command injection 7.6%
  • CVE-2025-14108 High 8.8 ZSPACE Q2C NAS HTTP POST Request open zfilev2_api.OpenSafe command injection 10.5%
  • CVE-2025-14107 High 8.8 ZSPACE Q2C NAS HTTP POST Request status zfilev2_api.SafeStatus command injection 12.2%
  • CVE-2025-14106 High 8.8 ZSPACE Q2C NAS HTTP POST Request close zfilev2_api.CloseSafe command injection 12.1%