Vendor
Quest
- CVEs tracked · all time
- 1
- in CISA KEV · all time
- 1
- articles · since 11 Sep
- 0
- articles · all time
- 9
No articles in the last 45 daysThe latest: Security Affairs, Wed 13 May, 14:12 UTC.See the full timeline
Products: KACE Systems Management Appliance (SMA)
CVEs
1 CVECVE-2025-32975Quest KACE Systems Management Appliance (SMA) Improper Authentication VulnerabilityCVSS10.0CriticalExploited2.5%EPSS9articles
- Quest KACE Flaw CVE-2025-32975 Leaks Data of 60+ OrganisationsSecurity Affairs
- CISA Adds Cisco SD WAN, Zimbra XSS Flaws to KEV CatalogSecurityWeek
- CISA adds weaponised PaperCut, TeamCity flaws to KEV catalogSecurity Affairs
- CISA adds eight KEV flaws, Cisco SDWAN bugs actively exploitedThe Hacker News
- Quest KACE SMA flaw lets attackers bypass authenticationCISA · official notice
- CISA warns KACE SMA bug lets attackers bypass authenticationCISA · official notice
- CVE-2025-32975: Quest KACE SMA SSO Authentication Bypass Enables Admin TakeoverSOCRadar
- Hackers Exploit CVE-2025-32975 (CVSS 10.0) to Hijack Unpatched Quest KACE SMA SystemsThe Hacker News
- Critical Quest KACE Vulnerability Potentially Exploited in AttacksSecurityWeek · first in our coverage