Threat actors are actively exploiting CVE-2025-32975, a critical path traversal vulnerability in Quest KACE Systems Management Appliance (SMA) with a CVSS score of 10.0, to achieve unauthenticated remote code execution. Patches were released on March 18, 2026.
Introduction to Malware Binary Triage (IMBT) Course
Looking to level up your skills? Get 10% off using coupon code: MWNEWS10 for any flavor.
Enroll Now and Save 10%: Coupon Code MWNEWS10
Note: Affiliate link – your enrollment helps support this platform at no extra cost to you.
Article Link: Critical Quest KACE SMA RCE (CVE-2025-32975) Under Attack - Cyberwarzone