Quest KACE Systems Management Appliance (SMA) contains an improper authentication vulnerability that could allow attackers to impersonate legitimate users witho…

Quest KACE Systems Management Appliance (SMA) contains an improper authentication vulnerability identified as CVE-2025-32975. The vulnerability could allow attackers to impersonate legitimate users without valid credentials. This is part of a series of vulnerabilities affecting KACE SMA systems, including CVE-2025-32976, CVE-2025-32977, and CVE-2025-32978. Quest has published a response addressing these security issues. The vulnerability affects authentication mechanisms in the systems management appliance, potentially allowing unauthorized access to managed systems.