KACE Systems Management Appliance - Installer Detection

The exposure of the KACE Systems Management Appliance’s installer interface through the /common/setup.php endpoint allowed unauthorized access to the system setup wizard. This interface was publicly accessible when it should have been restricted, potentially granting attackers the ability to...

VulnCheck KEV: CVE-2025-32975

Quest KACE Systems Management Appliance SMA contains an improper authentication vulnerability that could allow attackers to impersonate legitimate users without valid credentials...

CVE-2018-25159: Unauthorized Error Injection Can Degrade Hardware Redundancy

Epross AVCON6 systems management platform contains an object-graph navigation language OGNL injection vulnerability that allows unauthenticated attackers to execute arbitrary commands by injecting malicious OGNL expressions. Attackers can send crafted requests to the login.action endpoint with OG...

Quest KACE Systems Management Appliance Authentication Failure DoS

The vulnerability of the Quest KACE Systems Management Appliance SMA tool for comprehensive network device management is related to the lack of authentication for critical functions. Exploiting this vulnerability could allow a malicious actor to cause service interruptions...

EUVD-2017-4139

Malware in sbrugna...

EUVD-2019-8171

Malware in sbrugna...

EUVD-2022-34128

Malicious code in bioql PyPI...

EUVD-2025-20096

Malicious code in bioql PyPI...

EUVD-2022-40812

Malicious code in bioql PyPI...

Quest KACE Systems Management Appliance Authentication Bypass

The vulnerability of the Quest KACE Systems Management Appliance SMA tool for comprehensive network device management is related to deficiencies in the authentication process. Exploiting this vulnerability can allow attackers operating remotely to bypass the authentication process...

CVE-2025-26850

The agent in Quest KACE Systems Management Appliance SMA before 14.0.97 and 14.1.x before 14.1.19 potentially allows privilege escalation on managed systems...

CVE-2025-26850: Incorrect Authorization

The agent in Quest KACE Systems Management Appliance SMA before 14.0.97 and 14.1.x before 14.1.19 potentially allows privilege escalation on managed systems...

PT-2025-28028 · Quest · Quest Kace System Management Appliance

Name of the Vulnerable Software and Affected Versions: Quest KACE Systems Management Appliance SMA versions 14.0.0 through 14.0.96 Quest KACE Systems Management Appliance SMA versions 14.1.0 through 14.1.18 Description: The issue potentially allows privilege escalation on managed systems...

CVE-2025-26850

The agent in Quest KACE Systems Management Appliance SMA before 14.0.97 and 14.1.x before 14.1.19 potentially allows privilege escalation on managed systems...

CVE-2025-32975

Quest KACE Systems Management Appliance SMA 13.0.x before 13.0.385, 13.1.x before 13.1.81, 13.2.x before 13.2.183, 14.0.x before 14.0.341 Patch 5, and 14.1.x before 14.1.101 Patch 4 contains an authentication bypass vulnerability that allows attackers to impersonate legitimate users without valid...

CVE-2025-32977

Quest KACE Systems Management Appliance SMA 13.0.x before 13.0.385, 13.1.x before 13.1.81, 13.2.x before 13.2.183, 14.0.x before 14.0.341 Patch 5, and 14.1.x before 14.1.101 Patch 4 allows unauthenticated users to upload backup files to the system. While signature validation is implemented,...

CVE-2025-32978

Quest KACE Systems Management Appliance SMA 13.0.x before 13.0.385, 13.1.x before 13.1.81, 13.2.x before 13.2.183, 14.0.x before 14.0.341 Patch 5, and 14.1.x before 14.1.101 Patch 4 allows unauthenticated users to replace system licenses through a web interface intended for license renewal...

CVE-2025-32976

Quest KACE Systems Management Appliance SMA 13.0.x before 13.0.385, 13.1.x before 13.1.81, 13.2.x before 13.2.183, 14.0.x before 14.0.341 Patch 5, and 14.1.x before 14.1.101 Patch 4 contains a logic flaw in its two-factor authentication implementation that allows authenticated users to bypass...

CVE-2025-32976

Quest KACE Systems Management Appliance SMA 13.0.x before 13.0.385, 13.1.x before 13.1.81, 13.2.x before 13.2.183, 14.0.x before 14.0.341 Patch 5, and 14.1.x before 14.1.101 Patch 4 contains a logic flaw in its two-factor authentication implementation that allows authenticated users to bypass...

PT-2025-26742

Name of the Vulnerable Software and Affected Versions: Quest KACE Systems Management Appliance SMA versions 13.0.x through 13.0.384 Quest KACE Systems Management Appliance SMA versions 13.1.x through 13.1.80 Quest KACE Systems Management Appliance SMA versions 13.2.x through 13.2.182 Quest KACE...