CVE-2025-26850 — AI Deep Analysis Summary

Q: Root Cause? (CWE/Flaw)

🛡️ **Root Cause**: **CWE-863** (Incorrect Authorization). 🔍 **Flaw**: The system fails to properly verify permissions, allowing unauthorized users to access restricted functions or escalate their rights.

Q: Who is affected? (Versions/Components)

🏢 **Affected Vendor**: Quest Software. 📦 **Product**: Quest KACE Systems Management Appliance. 📉 **Versions**: - **14.0.x** before **14.0.97** - **14.1.x** before **14.1.19**

Q: Is there a public Exp? (PoC/Wild Exploitation)

🕵️ **Public Exploit**: **No**. - The `pocs` field is empty. - No known Proof-of-Concept (PoC) or wild exploitation reported yet. - **But**: CVSS score is 9.8 (Critical), so high-risk tools may emerge quickly.

Q: How to self-check? (Features/Scanning)

🔍 **Self-Check**: 1. Check your KACE SMA version number. 2. Is it **< 14.0.97** or **< 14.1.19**? 3. If yes, you are vulnerable. 4. Monitor Quest Support KB for specific detection signatures.

Q: Is it fixed officially? (Patch/Mitigation)

✅ **Official Fix**: **Yes**. - **Patch 14.0.97** for the 14.0 branch. - **Patch 14.1.19** for the 14.1 branch. - Reference: Quest Support KB 4378559.

Q: Is it urgent? (Priority Suggestion)

🔥 **Urgency**: **CRITICAL (Immediate Action)**. - CVSS 9.8/10. - No auth required. - High impact. - **Action**: Upgrade to patched versions immediately to prevent potential takeover.

Updated May 06, 2026 CVSS 9.3 · Critical

This is a summary of the AI-generated 10-question deep analysis. The full version (longer answers, follow-up Q&A, related CVEs) requires login. Read the full analysis →

Q1What is this vulnerability? (Essence + Consequences)

🚨 **Essence**: A critical security flaw in Quest KACE SMA allowing **Privilege Escalation**.…

Read full answer (login)

Q2Root Cause? (CWE/Flaw)

🛡️ **Root Cause**: **CWE-863** (Incorrect Authorization). <br>🔍 **Flaw**: The system fails to properly verify permissions, allowing unauthorized users to access restricted functions or escalate their rights.

Q3Who is affected? (Versions/Components)

🏢 **Affected Vendor**: Quest Software. <br>📦 **Product**: Quest KACE Systems Management Appliance. <br>📉 **Versions**: <br>- **14.0.x** before **14.0.97** <br>- **14.1.x** before **14.1.19**

Q4What can hackers do? (Privileges/Data)

💀 **Attacker Actions**: <br>- **Privilege Escalation**: Move from low-level user to Admin/Root. <br>- **Data Theft**: Access sensitive IT asset data (High Confidentiality loss).…

Read full answer (login)

Q5Is exploitation threshold high? (Auth/Config)

⚠️ **Exploitation Threshold**: **LOW**. <br>- **Network**: Local (AV:L) - likely requires network access to the appliance. <br>- **Complexity**: Low (AC:L) - easy to exploit.…

Read full answer (login)

Q6Is there a public Exp? (PoC/Wild Exploitation)

🕵️ **Public Exploit**: **No**. <br>- The `pocs` field is empty. <br>- No known Proof-of-Concept (PoC) or wild exploitation reported yet. <br>- **But**: CVSS score is 9.8 (Critical), so high-risk tools may emerge quickly.

Q7How to self-check? (Features/Scanning)

🔍 **Self-Check**: <br>1. Check your KACE SMA version number. <br>2. Is it **< 14.0.97** or **< 14.1.19**? <br>3. If yes, you are vulnerable. <br>4. Monitor Quest Support KB for specific detection signatures.

Q8Is it fixed officially? (Patch/Mitigation)

✅ **Official Fix**: **Yes**. <br>- **Patch 14.0.97** for the 14.0 branch. <br>- **Patch 14.1.19** for the 14.1 branch. <br>- Reference: Quest Support KB 4378559.

Q9What if no patch? (Workaround)

🚧 **No Patch Workaround**: <br>- **Network Segmentation**: Restrict access to the KACE appliance management interface. <br>- **WAF/IPS**: Block suspicious requests targeting authorization endpoints.…

Read full answer (login)

Q10Is it urgent? (Priority Suggestion)

🔥 **Urgency**: **CRITICAL (Immediate Action)**. <br>- CVSS 9.8/10. <br>- No auth required. <br>- High impact. <br>- **Action**: Upgrade to patched versions immediately to prevent potential takeover.

Continue exploring

Vulnerability detail Full AI analysis (login) Quest CWE-863