CVE-2025-32975
CVSS Score
10.0
EPSS Score
0.2%
EPSS Percentile
38th
Quest KACE Systems Management Appliance (SMA) 13.0.x before 13.0.385, 13.1.x before 13.1.81, 13.2.x before 13.2.183, 14.0.x before 14.0.341 (Patch 5), and 14.1.x before 14.1.101 (Patch 4) contains an authentication bypass vulnerability that allows attackers to impersonate legitimate users without valid credentials. The vulnerability exists in the SSO authentication handling mechanism and can lead to complete administrative takeover.
| Vendor | n/a |
| Product | n/a |
| Published | Jun 24, 2025 |
| Last Updated | Mar 24, 2026 |
Stay Ahead of the Next One
Get instant alerts for n/a n/a
Be the first to know when new critical vulnerabilities affecting n/a n/a are published — delivered to Slack, Telegram or Discord.
Get Free Alerts →
Free · No credit card · 60 sec setup
Affected Versions
n/a / n/a
n/a
References
support.quest.com: https://support.quest.com/kb/4379499/quest-response-to-kace-sma-vulnerabilities-cve-2025-32975-cve-2025-32976-cve-2025-32977-cve-2025-32978 seclists.org: https://seclists.org/fulldisclosure/2025/Jun/22 seralys.com: https://seralys.com/research/CVE-2025-32975.txt seclists.org: http://seclists.org/fulldisclosure/2025/Jun/25