CVE-2025-26850

9.3 criticalEPSS 0.2%

Critical (9.3). EPSS 0.2% chance of exploitation in the next 30 days.

The agent in Quest KACE Systems Management Appliance (SMA) before 14.0.97 and 14.1.x before 14.1.19 potentially allows privilege escalation on managed systems.

Severity

CVSS 3.1

9.3 critical

CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

EPSS: 0.2% chance of exploitation in the next 30 days; higher than 7% of CVEs (scores of 2026-10-31)
CWE: CWE-863
Published: 2025-07-05
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

References

https://support.quest.com/kb/4378559/quest-response-to-kace-sma-agent-vulnerability-cve-2025-26850

Check your stack JSON