Warning: CRITICAL Vulnerabilities found in Quest KACE Systems Management Appliance! Patch Immediately!

Critical authentication and cryptographic-signature vulnerabilities were disclosed in Quest KACE Systems Management Appliance (CVE-2025-32975, CVE-2025-32976, CVE-2025-32977, CVE-2025-32978) that can enable full administrative takeover, 2FA bypass, malicious backup uploads, and license replacement/DoS; CVE-2025-32975 (CVSS 10.0) is confirmed as actively exploited by CISA. Vendor patches are available for specific SMA versions and organizations are advised to prioritize immediate patching, increase monitoring, and report intrusions to their CERT.