CVE-2025-26850

critical · 9.3

The agent in Quest KACE Systems Management Appliance (SMA) before 14.0.97 and 14.1.x before 14.1.19 potentially allows privilege escalation on managed systems.

9.3

CVSS

0.2%

EPSS (exploit prob.)

6th

EPSS percentile

2025-07-05

Published

CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

Weaknesses

CWE-863

References

https://support.quest.com/kb/4378559/quest-response-to-kace-sma-agent-vulnerability-cve-2025-26850

Query this programmatically:

curl https://evil-db.io/api/v1/cve/CVE-2025-26850