The ZSPACE Q2C NAS contains a vulnerability related to incorrect symbolic link following. Attackers can format a USB drive to ext4, create a symbolic link to its root directory, insert the drive into the NAS device's slot, and then access the USB drive's directory mounted on the NAS using the Samba protocol. This allows them to obtain all files within the NAS system and tamper with those files.
References
| Link | Resource |
|---|---|
| https://www.notion.so/ZSPACE-Incorrect-Symlink-Follow-2c26cf4e528a8087ba14d9b1d31a5bb2?source=copy_link | Exploit Third Party Advisory |
Configurations
Configuration 1 (hide)
| AND |
|
History
11 Feb 2026, 16:14
| Type | Values Removed | Values Added |
|---|---|---|
| First Time |
Zspace q2c
Zspace q2c Firmware Zspace |
|
| CPE | cpe:2.3:o:zspace:q2c_firmware:*:*:*:*:*:*:*:* cpe:2.3:h:zspace:q2c:-:*:*:*:*:*:*:* |
|
| References | () https://www.notion.so/ZSPACE-Incorrect-Symlink-Follow-2c26cf4e528a8087ba14d9b1d31a5bb2?source=copy_link - Exploit, Third Party Advisory |
06 Feb 2026, 21:16
| Type | Values Removed | Values Added |
|---|---|---|
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 6.1 |
05 Feb 2026, 15:16
| Type | Values Removed | Values Added |
|---|---|---|
| CWE | CWE-59 | |
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 9.8 |
03 Feb 2026, 18:16
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2026-02-03 18:16
Updated : 2026-02-11 16:14
NVD link : CVE-2025-69431
Mitre link : CVE-2025-69431
CVE.ORG link : CVE-2025-69431
JSON object : View
Products Affected
zspace
- q2c
- q2c_firmware
CWE
CWE-59
Improper Link Resolution Before File Access ('Link Following')