Browse all 6 CVE security advisories affecting ZSPACE. AI-powered Chinese analysis, POCs, and references for each vulnerability.
ZSPACE provides virtual workspace solutions enabling remote access to applications and desktops. Historically, the platform has been susceptible to multiple remote code execution vulnerabilities, cross-site scripting flaws, and privilege escalation issues, as evidenced by its six recorded CVEs. Security researchers have identified authentication bypass weaknesses and insufficient input validation in its web interface. While no major public security incidents have been widely reported, the consistent pattern of vulnerabilities in access control and remote execution components suggests potential attack surfaces for unauthorized system compromise and data exfiltration.
| CVE ID | Title | CVSS | Severity | Published |
|---|---|---|---|---|
| CVE-2025-15133 | ZSPACE Z4Pro+ HTTP POST Request close zfilev2_api_CloseSafe command injection — Z4Pro+CWE-77 | 6.3 | Medium | 2025-12-28 |
| CVE-2025-15132 | ZSPACE Z4Pro+ HTTP POST Request open zfilev2_api_open command injection — Z4Pro+CWE-77 | 6.3 | Medium | 2025-12-28 |
| CVE-2025-15131 | ZSPACE Z4Pro+ HTTP POST Request status zfilev2_api_SafeStatus command injection — Z4Pro+CWE-77 | 6.3 | Medium | 2025-12-28 |
This page lists every published CVE security advisory associated with ZSPACE. Each entry links to a detailed page with CVSS scoring, CWE classification, affected products and references. AI-generated Chinese analysis is provided for fast triage.