CVE-2025-32975
CVSS Score
10.0
EPSS Score
0.5%
EPSS Percentile
68th
Quest KACE Systems Management Appliance (SMA) 13.0.x before 13.0.385, 13.1.x before 13.1.81, 13.2.x before 13.2.183, 14.0.x before 14.0.341 (Patch 5), and 14.1.x before 14.1.101 (Patch 4) contains an authentication bypass vulnerability that allows attackers to impersonate legitimate users without valid credentials. The vulnerability exists in the SSO authentication handling mechanism and can lead to complete administrative takeover.
| Vendor | n/a |
| Product | n/a |
| Published | Jun 24, 2025 |
| Last Updated | Apr 21, 2026 |
⚠️ Actively Exploited — Act Now
Get instant alerts for n/a n/a
This vulnerability is actively exploited in the wild. Set up free real-time alerts so you're first to know about threats like CVE-2025-32975.
Get Free Alerts →
Free · No credit card · 60 sec setup
Affected Versions
n/a / n/a
n/a
References
support.quest.com: https://support.quest.com/kb/4379499/quest-response-to-kace-sma-vulnerabilities-cve-2025-32975-cve-2025-32976-cve-2025-32977-cve-2025-32978 seclists.org: https://seclists.org/fulldisclosure/2025/Jun/22 seralys.com: https://seralys.com/research/CVE-2025-32975.txt cisa.gov: https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2025-32975 seclists.org: http://seclists.org/fulldisclosure/2025/Jun/25