HIGHVulnerability
Verified
Global

CISA KEV: Quest KACE Systems Management Appliance (SMA) — Quest KACE Systems Management Appliance (SMA) Improper Authentication Vulnerability

·Source: CISA KEV

Updated:

Executive Summary

Quest KACE Systems Management Appliance (SMA) contains an improper authentication vulnerability that could allow attackers to impersonate legitimate users without valid credentials.

Analysis

Quest KACE Systems Management Appliance (SMA) contains an improper authentication vulnerability that could allow attackers to impersonate legitimate users without valid credentials. Added to CISA Known Exploited Vulnerabilities catalog on 2026-04-20. Remediation due: 2026-05-04.

Indicators of Compromise (1)

CVE (1)
CVE-2025-32975
NVDMITRE CVE
Source Attribution

Originally published by CISA KEV on Apr 20, 2026. Verified by: CISA.

Related Threats

MEDIUMVulnerabilityNEW

NMI acquires Dwolla

Embedded payments firm NMI has acquired API-first account-to-account transaction vendor Dwolla.

Finextra
MEDIUMVulnerabilityNEW

Unpatched ChromaDB Vulnerability Can Lead to Server Takeover

The security defect can be exploited remotely, without authentication, to execute arbitrary code and leak sensitive information. The post Unpatched ChromaDB Vulnerability Can Lead to Server Takeover appeared first on SecurityWeek .

SecurityWeek
MEDIUMVulnerability

CaixaBank launches a carbon credit trading platform to help clients offset their emissions

CaixaBank CIB has launched a carbon credit trading platform, a tool designed to make it easier for corporate clients and businesses to voluntarily offset CO2 emissions.

Finextra