VulnCheck KEV: CVE-2025-32975

Quest KACE Systems Management Appliance SMA contains an improper authentication vulnerability that could allow attackers to impersonate legitimate users without valid credentials...

The vulnerability of the Quest KACE Systems Management Appliance’s tool for comprehensive network device management lies in the lack of authentication for critical functions. This allows attackers to trigger a service failure.

The vulnerability of the Quest KACE Systems Management Appliance SMA tool for comprehensive network device management is related to the lack of authentication for critical functions. Exploiting this vulnerability could allow a malicious actor to cause service interruptions...

EUVD-2017-4139

Malware in sbrugna...

EUVD-2022-34128

Malicious code in bioql PyPI...

EUVD-2022-40812

Malicious code in bioql PyPI...

The vulnerability of the Quest KACE Systems Management Appliance’s tool for comprehensive network device management, related to authentication procedures that have flaws, allows attackers to bypass the authentication process.

The vulnerability of the Quest KACE Systems Management Appliance SMA tool for comprehensive network device management is related to deficiencies in the authentication process. Exploiting this vulnerability can allow attackers operating remotely to bypass the authentication process...

CVE-2025-26850

The agent in Quest KACE Systems Management Appliance SMA before 14.0.97 and 14.1.x before 14.1.19 potentially allows privilege escalation on managed systems...

CVE-2025-26850: Incorrect Authorization

The agent in Quest KACE Systems Management Appliance SMA before 14.0.97 and 14.1.x before 14.1.19 potentially allows privilege escalation on managed systems...

CVE-2025-26850

The agent in Quest KACE Systems Management Appliance SMA before 14.0.97 and 14.1.x before 14.1.19 potentially allows privilege escalation on managed systems...

PT-2025-28028 · Quest · Quest Kace System Management Appliance

Name of the Vulnerable Software and Affected Versions: Quest KACE Systems Management Appliance SMA versions 14.0.0 through 14.0.96 Quest KACE Systems Management Appliance SMA versions 14.1.0 through 14.1.18 Description: The issue potentially allows privilege escalation on managed systems...

CVE-2025-32977

Quest KACE Systems Management Appliance SMA 13.0.x before 13.0.385, 13.1.x before 13.1.81, 13.2.x before 13.2.183, 14.0.x before 14.0.341 Patch 5, and 14.1.x before 14.1.101 Patch 4 allows unauthenticated users to upload backup files to the system. While signature validation is implemented,...

CVE-2025-32975

Quest KACE Systems Management Appliance SMA 13.0.x before 13.0.385, 13.1.x before 13.1.81, 13.2.x before 13.2.183, 14.0.x before 14.0.341 Patch 5, and 14.1.x before 14.1.101 Patch 4 contains an authentication bypass vulnerability that allows attackers to impersonate legitimate users without valid...

CVE-2025-32978

Quest KACE Systems Management Appliance SMA 13.0.x before 13.0.385, 13.1.x before 13.1.81, 13.2.x before 13.2.183, 14.0.x before 14.0.341 Patch 5, and 14.1.x before 14.1.101 Patch 4 allows unauthenticated users to replace system licenses through a web interface intended for license renewal...

CVE-2025-32977: Improper Verification of Cryptographic Signature

Quest KACE Systems Management Appliance SMA 13.0.x before 13.0.385, 13.1.x before 13.1.81, 13.2.x before 13.2.183, 14.0.x before 14.0.341 Patch 5, and 14.1.x before 14.1.101 Patch 4 allows unauthenticated users to upload backup files to the system. While signature validation is implemented,...

CVE-2025-32976

Quest KACE Systems Management Appliance SMA 13.0.x before 13.0.385, 13.1.x before 13.1.81, 13.2.x before 13.2.183, 14.0.x before 14.0.341 Patch 5, and 14.1.x before 14.1.101 Patch 4 contains a logic flaw in its two-factor authentication implementation that allows authenticated users to bypass...

CVE-2025-32976

Quest KACE Systems Management Appliance SMA 13.0.x before 13.0.385, 13.1.x before 13.1.81, 13.2.x before 13.2.183, 14.0.x before 14.0.341 Patch 5, and 14.1.x before 14.1.101 Patch 4 contains a logic flaw in its two-factor authentication implementation that allows authenticated users to bypass...

CVE-2025-32978

Quest KACE Systems Management Appliance SMA 13.0.x before 13.0.385, 13.1.x before 13.1.81, 13.2.x before 13.2.183, 14.0.x before 14.0.341 Patch 5, and 14.1.x before 14.1.101 Patch 4 allows unauthenticated users to replace system licenses through a web interface intended for license renewal...

CVE-2025-32975: Improper Authentication

Quest KACE Systems Management Appliance SMA 13.0.x before 13.0.385, 13.1.x before 13.1.81, 13.2.x before 13.2.183, 14.0.x before 14.0.341 Patch 5, and 14.1.x before 14.1.101 Patch 4 contains an authentication bypass vulnerability that allows attackers to impersonate legitimate users without valid...

CVE-2025-32976: Authentication Bypass Using an Alternate Path or Channel

Quest KACE Systems Management Appliance SMA 13.0.x before 13.0.385, 13.1.x before 13.1.81, 13.2.x before 13.2.183, 14.0.x before 14.0.341 Patch 5, and 14.1.x before 14.1.101 Patch 4 contains a logic flaw in its two-factor authentication implementation that allows authenticated users to bypass...

CVE-2025-32978: Missing Authentication for Critical Function

Quest KACE Systems Management Appliance SMA 13.0.x before 13.0.385, 13.1.x before 13.1.81, 13.2.x before 13.2.183, 14.0.x before 14.0.341 Patch 5, and 14.1.x before 14.1.101 Patch 4 allows unauthenticated users to replace system licenses through a web interface intended for license renewal...