CVE-2025-32975

10.0

CRITICAL CVSS 3.1

Quest KACE Systems Management Appliance Authentication Bypass Vulnerability

Overview

Description

Quest KACE Systems Management Appliance (SMA) 13.0.x before 13.0.385, 13.1.x before 13.1.81, 13.2.x before 13.2.183, 14.0.x before 14.0.341 (Patch 5), and 14.1.x before 14.1.101 (Patch 4) contains an authentication bypass vulnerability that allows attackers to impersonate legitimate users without valid credentials. The vulnerability exists in the SSO authentication handling mechanism and can lead to complete administrative takeover.

Details

INFO

Published Date :

June 24, 2025, 3:15 p.m.

Last Modified :

Nov. 3, 2025, 8:18 p.m.

Remotely Exploit :

Yes !

Source :

[email protected]

Impact

Affected Products

The following products are affected by CVE-2025-32975 vulnerability. Even if cvefeed.io is aware of the exact versions of the products that are affected, the information is not represented in the table below.

No affected product recoded yet

: Total Affected Vendor : 0 | Products : 0

Scoring

CVSS Scores

The Common Vulnerability Scoring System is a standardized framework for assessing the severity of vulnerabilities in software and systems. We collect and displays CVSS scores from various sources for each CVE.

Score	Version	Severity	Vector	Exploitability Score	Impact Score	Source
	CVSS 3.1	CRITICAL				134c704f-9b21-4f2e-91b3-4a467353bcc0

Solution

Update Quest KACE SMA to a patched version to fix the authentication bypass vulnerability.

Update to Quest KACE SMA version 13.0.385 or later.
Update to Quest KACE SMA version 13.1.81 or later.
Update to Quest KACE SMA version 13.2.183 or later.
Update to Quest KACE SMA version 14.0.341 or later.

References

References to Advisories, Solutions, and Tools

Here, you will find a curated list of external links that provide in-depth information, practical solutions, and valuable tools related to CVE-2025-32975.

URL	Resource
https://seclists.org/fulldisclosure/2025/Jun/22
https://seralys.com/research/CVE-2025-32975.txt
https://support.quest.com/kb/4379499/quest-response-to-kace-sma-vulnerabilities-cve-2025-32975-cve-2025-32976-cve-2025-32977-cve-2025-32978
http://seclists.org/fulldisclosure/2025/Jun/25

CWE - Common Weakness Enumeration

While CVE identifies specific instances of vulnerabilities, CWE categorizes the common flaws or weaknesses that can lead to vulnerabilities. CVE-2025-32975 is associated with the following CWEs:

CWE-287: Improper Authentication

Common Attack Pattern Enumeration and Classification (CAPEC)

Common Attack Pattern Enumeration and Classification (CAPEC) stores attack patterns, which are descriptions of the common attributes and approaches employed by adversaries to exploit the CVE-2025-32975 weaknesses.

CAPEC-22: Exploiting Trust in Client Exploiting Trust in Client CAPEC-57: Utilizing REST's Trust in the System Resource to Obtain Sensitive Data Utilizing REST's Trust in the System Resource to Obtain Sensitive Data CAPEC-94: Adversary in the Middle (AiTM) Adversary in the Middle (AiTM) CAPEC-114: Authentication Abuse Authentication Abuse CAPEC-115: Authentication Bypass Authentication Bypass CAPEC-151: Identity Spoofing Identity Spoofing CAPEC-194: Fake the Source of Data Fake the Source of Data CAPEC-593: Session Hijacking Session Hijacking CAPEC-633: Token Impersonation Token Impersonation CAPEC-650: Upload a Web Shell to a Web Server Upload a Web Shell to a Web Server

We scan GitHub repositories to detect new proof-of-concept exploits. Following list is a collection of public exploits and proof-of-concepts, which have been published on GitHub (sorted by the most recently updated).

Results are limited to the first 15 repositories due to potential performance issues.

The following list is the news that have been mention CVE-2025-32975 vulnerability anywhere in the article.

TheCyberThrone

Quest KACE SMA flaw CVE-2025-32975 Actively Exploited

March 23, 2026OverviewCVE-2025-32975 is a critical authentication bypass vulnerability in Quest KACE SMA’s SSO authentication handling mechanism. The root cause lies in improper validation of authenti ...

Published Date: Mar 23, 2026 (1 week, 1 day ago)

The Hacker News

Hackers Exploit CVE-2025-32975 (CVSS 10.0) to Hijack Unpatched Quest KACE SMA Systems

Threat actors are suspected to be exploiting a maximum-severity security flaw impacting Quest KACE Systems Management Appliance (SMA), according to Arctic Wolf. The cybersecurity company said it obser ...

Published Date: Mar 23, 2026 (1 week, 2 days ago)

Daily CyberSecurity

Critical 9.3 CVSS Flaw in QNAP QVR Pro Exposes Surveillance Systems

QNAP Systems, Inc. has issued a critical security advisory for users of its QVR Pro surveillance solution. A high-severity vulnerability, tracked as CVE-2026-22898 with a CVSS score of 9.3, could allo ...

Published Date: Mar 21, 2026 (1 week, 4 days ago)

Daily CyberSecurity

Critical 9.8 CVSS Flaw Exposes Oracle Identity Manager to Total Takeover

Oracle has issued an urgent security alert following the discovery of a “Critical” rated vulnerability impacting its Fusion Middleware ecosystem. The flaw, tracked as CVE-2026-21992, carries a CVSS sc ...

Published Date: Mar 21, 2026 (1 week, 4 days ago)

Daily CyberSecurity

PoC Exploit Publicly Disclosed: Apple Deploys First-Ever Background Security Patch for Cross-Origin Flaw

Apple has broken new ground in its defensive strategy, utilizing a “Background Security Improvements” feature to deliver an out-of-band fix for a significant cross-origin vulnerability. The flaw, trac ...

Published Date: Mar 21, 2026 (1 week, 4 days ago)

Daily CyberSecurity

Two High-Severity Spring Boot Flaws Expose Actuator Endpoints

Security researchers have issued a double warning for developers using the Spring Boot framework, identifying two high-severity vulnerabilities that could allow attackers to bypass authentication. The ...

Published Date: Mar 20, 2026 (1 week, 4 days ago)

Daily CyberSecurity

PoC Exploit Publicly Disclosed: Windows ‘libarchive’ Flaw Leaks NetNTLMv2 Hashes

Security researchers Len Sadowski and Oğuz Bektaş have publicly pulled back the curtain on a vulnerability within Windows’ implementation of libarchive. The flaw, tracked as CVE-2025-59284, demonstrat ...

Published Date: Mar 20, 2026 (1 week, 4 days ago)

Daily CyberSecurity

High-Severity ingress-nginx Flaw Exposes Kubernetes Secrets

A high-severity security flaw has been identified in ingress-nginx, a widely used Ingress controller for Kubernetes clusters. The vulnerability, tracked as CVE-2026-4342 with a CVSS score of 8.8, coul ...

Published Date: Mar 20, 2026 (1 week, 4 days ago)

Daily CyberSecurity

The Invisible Breach: ‘Operation GhostMail’ Uses Zero-Click XSS to Hijack Ukrainian Webmail

Image: Seqrite Labs A sophisticated cyberespionage campaign, dubbed Operation GhostMail, has been detected targeting critical government infrastructure in Ukraine. Security researchers at Seqrite Labs ...