Brand
Quest: actively exploited vulnerabilities
2 vulnerabilities in Quest products (KACE Systems Management Appliance (SMA)) are in CISA’s catalog of exploited vulnerabilities. Last added: April 20, 2026.
-
1 vulnerability added in the last 12 months
-
2 exploited vulnerabilities in the catalog, in total
-
0 added in the last 30 days
By category
Add just one Quest category to your radar, or open its page.
- Monitoring, ITSM and asset management 2 vulnerabilities
A high count also reflects how widely a product is deployed and how much attackers care about it: it is not a security rating.
Affected products
- KACE Systems Management Appliance (SMA)2 vulnerabilities, Monitoring and ITSM
Name used by CISA: Quest. Product families: indicative classification by this site.
Patch first
In the order of the main list (Patch first): recent additions first, then the most severe. The number is the rank within this Quest list.
- Rank 1
Quest KACE Systems Management Appliance (SMA)CVE-2025-32975
Quest KACE Systems Management Appliance (SMA) Improper Authentication Vulnerability
CVSS severity 10.0critical
Added Apr 20, 2026
- Rank 2
Quest KACE Systems Management Appliance (SMA)CVE-2018-11138
Quest KACE System Management Appliance Remote Command Execution Vulnerability
RansomwareCVE from 2018, added in 2022
CVSS severity 9.8critical
Added Mar 25, 2022
Follow and verify
Indicative classification, based on the vendor and product names given by CISA. How products are classified.