VDB
BDU%3A2026-00086
BDU%3A2026-00086
PUBLISHED
CVSS 9 CRITICAL
Уязвимость инструмента для комплексного управления сетевыми устройствами Quest KACE Systems Management Appliance (SMA), связанная с обходом процедуры аутентификации посредством использования альтернативного пути или канала, позволяющая нарушителю обойти процедуру аутентификации
Risk Scores
CVSS 2.0
9
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Quest Software Inc. | Quest KACE Systems Management Appliance (SMA) | |
| n/a | n/a | n/a |
Timeline
- Jun 24, 2025 PoC Published
- Jun 24, 2025 PoC Published
- Jun 24, 2025 PoC Published
- Jun 24, 2025 PoC Published
- Jun 25, 2025 PoC Published
- Jun 30, 2025 PoC Published
- Jan 6, 2026 CVE Published
- Mar 20, 2026 PoC Published
References
- https://seclists.org/fulldisclosure/2025/Jun/23 url
- http://seclists.org/fulldisclosure/2025/Jun/25 url
- https://support.quest.com/kb/4379499/quest-response-to-kace-sma-vulnerabilities-cve-2025-32975-cve-2025-32976-cve-2025-32977-cve-2025-32978 url
- https://seralys.com/research/CVE-2025-32976.txt advisory