CVE-2025-26850: The agent in Quest KACE Systems Management Appliance (SMA) before 14.0.97 and 14.1.x before 14.1.19 potentially allows privilege escalation on managed systems.

PriorityP344critical9.3CVSS 3.1

AVLACLPRNUINSCCHIHAH

EPSS

0.16%

5.6th percentile

The agent in Quest KACE Systems Management Appliance (SMA) before 14.0.97 and 14.1.x before 14.1.19 potentially allows privilege escalation on managed systems.

Affected

2 ranges

Vendor	Product	Version range	Fixed in
quest	kace_systems_management_appliance	< 14.0.97	14.0.97
quest	kace_systems_management_appliance	>= 14.1.0 < 14.1.19	14.1.19

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.