Skip to content
ZZSPACE
Products
| Product | CVEs | Exploited | Latest |
| Q2C NAS | 3 | – | Dec 5, 2025 |
| Z4Pro+ | 3 | – | Dec 28, 2025 |
Exploited and recent CVEs
-
CVE-2025-15133
Medium 6.3
ZSPACE Z4Pro+ HTTP POST Request close zfilev2_api_CloseSafe command injection
7.9%
-
CVE-2025-15132
Medium 6.3
ZSPACE Z4Pro+ HTTP POST Request open zfilev2_api_open command injection
7.6%
-
CVE-2025-15131
Medium 6.3
ZSPACE Z4Pro+ HTTP POST Request status zfilev2_api_SafeStatus command injection
7.6%
-
CVE-2025-14108
High 8.8
ZSPACE Q2C NAS HTTP POST Request open zfilev2_api.OpenSafe command injection
10.5%
-
CVE-2025-14107
High 8.8
ZSPACE Q2C NAS HTTP POST Request status zfilev2_api.SafeStatus command injection
12.2%
-
CVE-2025-14106
High 8.8
ZSPACE Q2C NAS HTTP POST Request close zfilev2_api.CloseSafe command injection
12.1%