CVE-2025-32975

Deeper analysis

Quest KACE Systems Management Appliance (SMA) versions 13.0.x prior to 13.0.385, 13.1.x prior to 13.1.81, 13.2.x prior to 13.2.183, 14.0.x prior to 14.0.341 Patch 5, and 14.1.x prior to 14.1.101 Patch 4 contain an authentication bypass vulnerability in the SSO authentication handling mechanism. The flaw, tracked as CWE-287 with a CVSS score of 10.0, permits attackers to impersonate legitimate users without supplying valid credentials and can result in full administrative control of the appliance.

Unauthenticated remote attackers can exploit the issue over the network to bypass authentication entirely, impersonate any user account, and achieve complete administrative takeover of the KACE SMA instance. No user interaction or prior privileges are required for successful exploitation.

Vendor guidance from Quest directs customers to apply the listed patches for each affected branch. CISA has added the CVE to its Known Exploited Vulnerabilities catalog, confirming active exploitation in the wild and underscoring the need for immediate remediation.

The EPSS score rose materially from a low baseline to a peak of 0.7531 on 2026-04-21 before receding to the current value of 0.3931, indicating that exploitation interest increased after public disclosure.