CVE-2025-32975 Quest KACE Systems Management Appliance (SMA)
Quest KACE Systems Management Appliance (SMA) 13.0.x before 13.0.385, 13.1.x before 13.1.81, 13.2.x before 13.2.183, 14.0.x before 14.0.341 (Patch 5), and 14.1.x before 14.1.101 (Patch 4) contains an authentication bypass vulnerability that allows attackers…
- CVSS
- 10.0 Critical
- EPSS
- 2.5%
- Percentile
- 85
- Published
- 2025-06-24
- Force
- 10 of 12
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
On CISA’s exploited list
Quest KACE Systems Management Appliance (SMA) Improper Authentication Vulnerability
- Added
- 2026-04-20
- Federal patch deadline
- 2026-05-04
- Ransomware use
- not known