--- title: "CISA KEV catalog, page 2 | CubePath" description: "The CISA Known Exploited Vulnerabilities catalog: CVEs with evidence of exploitation in the wild, newest first, with the date added and the federal due date." language: en source: https://cubepath.com/security/cve/kev?page=2 --- # CISA KEV catalog, page 2 | CubePath | CVE | Vulnerability | Added | Federal due date | Ransomware | | ------------------------------------------------------------------ | --------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | ------------ | ---------------- | ---------- | | [CVE-2026-72529](https://cubepath.com/security/cve/CVE-2026-72529) | TrueConf Server Missing Authentication for Critical Function Vulnerability TrueConf / Server | Aug 20, 2026 | Aug 23, 2026 | | | [CVE-2026-72530](https://cubepath.com/security/cve/CVE-2026-72530) | TrueConf Server Code Injection Vulnerability TrueConf / Server | Aug 20, 2026 | Sep 3, 2026 | | | [CVE-2026-64849](https://cubepath.com/security/cve/CVE-2026-64849) | MLflow Server-Side Request Forgery Vulnerability MLflow / MLflow | Aug 19, 2026 | Sep 2, 2026 | | | [CVE-2026-33824](https://cubepath.com/security/cve/CVE-2026-33824) | Microsoft Internet Key Exchange (IKE) Service Extensions Double Free Vulnerability Microsoft / Internet Key Exchange (IKE) Service Extensions | Aug 18, 2026 | Aug 21, 2026 | | | [CVE-2026-55040](https://cubepath.com/security/cve/CVE-2026-55040) | Microsoft SharePoint Weak Authentication Vulnerability Microsoft / SharePoint | Aug 18, 2026 | Aug 21, 2026 | | | [CVE-2026-59310](https://cubepath.com/security/cve/CVE-2026-59310) | Broadcom VMware vCenter Path Traversal Vulnerability Broadcom / VMware vCenter | Aug 18, 2026 | Aug 21, 2026 | Known | | [CVE-2026-65400](https://cubepath.com/security/cve/CVE-2026-65400) | Apple macOS Improper Authentication Vulnerability Apple / macOS | Aug 18, 2026 | Aug 21, 2026 | | | [CVE-2025-62593](https://cubepath.com/security/cve/CVE-2025-62593) | Ray-Project Ray Code Injection Vulnerability Ray-Project / Ray | Aug 17, 2026 | Aug 20, 2026 | | | [CVE-2026-20349](https://cubepath.com/security/cve/CVE-2026-20349) | Cisco Secure Firewall Adaptive Security Appliance (ASA) and Secure Firewall Threat Defense (FTD) Heap Inspection Vulnerability Cisco / Secure Firewall Adaptive Security Appliance (ASA) and Secure Firewall Threat Defense (FTD) | Aug 11, 2026 | Aug 14, 2026 | | | [CVE-2026-68820](https://cubepath.com/security/cve/CVE-2026-68820) | Microsoft Windows Ancillary Function Driver for WinSock Use-After-Free Vulnerability Microsoft / Windows Ancillary Function Driver for WinSock | Aug 11, 2026 | Aug 25, 2026 | | | [CVE-2026-72898](https://cubepath.com/security/cve/CVE-2026-72898) | Metabase SQL Injection Vulnerability Metabase / Metabase | Aug 11, 2026 | Aug 14, 2026 | | | [CVE-2026-8037](https://cubepath.com/security/cve/CVE-2026-8037) | Progress LoadMaster Command Injection Vulnerability Progress / LoadMaster | Aug 7, 2026 | Aug 10, 2026 | | | [CVE-2026-63077](https://cubepath.com/security/cve/CVE-2026-63077) | JetBrains TeamCity Deserialization of Untrusted Data Vulnerability JetBrains / TeamCity | Aug 5, 2026 | Aug 8, 2026 | Known | | [CVE-2026-18556](https://cubepath.com/security/cve/CVE-2026-18556) | N-able N-central Authentication Bypass Using an Alternate Path or Channel Vulnerability N-able / N-central | Aug 4, 2026 | Aug 7, 2026 | | | [CVE-2026-34486](https://cubepath.com/security/cve/CVE-2026-34486) | Apache Tomcat Missing Encryption of Sensitive Data Vulnerability Apache / Tomcat | Aug 4, 2026 | Aug 7, 2026 | | | [CVE-2026-9198](https://cubepath.com/security/cve/CVE-2026-9198) | IBM Langflow Code Injection Vulnerability IBM / Langflow | Aug 4, 2026 | Aug 7, 2026 | | | [CVE-2026-18577](https://cubepath.com/security/cve/CVE-2026-18577) | N-able N-central Authentication Bypass Using an Alternate Path or Channel Vulnerability N-able / N-central | Aug 3, 2026 | Aug 6, 2026 | | | [CVE-2026-20316](https://cubepath.com/security/cve/CVE-2026-20316) | Cisco Secure Firewall Management Center Use of Hard-coded Password Vulnerability Cisco / Secure Firewall Management Center (FMC) | Jul 29, 2026 | Aug 1, 2026 | Known | | [CVE-2025-68686](https://cubepath.com/security/cve/CVE-2025-68686) | Fortinet FortiOS Exposure of Sensitive Information to an Unauthorized Actor Vulnerability Fortinet / FortiOS | Jul 27, 2026 | Aug 10, 2026 | | | [CVE-2026-16812](https://cubepath.com/security/cve/CVE-2026-16812) | Arista VeloCloud Orchestrator On-Prem OS Command Injection Vulnerability Arista / VeloCloud Orchestrator | Jul 27, 2026 | Jul 30, 2026 | | | [CVE-2026-16232](https://cubepath.com/security/cve/CVE-2026-16232) | Check Point SmartConsole Improper Authentication Vulnerability Check Point / SmartConsole | Jul 22, 2026 | Jul 25, 2026 | | | [CVE-2026-50522](https://cubepath.com/security/cve/CVE-2026-50522) | Microsoft SharePoint Deserialization of Untrusted Data Vulnerability Microsoft / SharePoint | Jul 22, 2026 | Jul 25, 2026 | | | [CVE-2021-27137](https://cubepath.com/security/cve/CVE-2021-27137) | DD-WRT Stack-Based Buffer Overflow Vulnerability DD-WRT / DD-WRT | Jul 21, 2026 | Jul 24, 2026 | | | [CVE-2026-0770](https://cubepath.com/security/cve/CVE-2026-0770) | Langflow Inclusion of Functionality from Untrusted Control Sphere Vulnerability Langflow / Langflow | Jul 21, 2026 | Jul 24, 2026 | | | [CVE-2026-60137](https://cubepath.com/security/cve/CVE-2026-60137) | WordPress Core SQL Injection Vulnerability WordPress / Core | Jul 21, 2026 | Aug 4, 2026 | | | [CVE-2026-63030](https://cubepath.com/security/cve/CVE-2026-63030) | WordPress Core Interpretation Conflict Vulnerability WordPress / Core | Jul 21, 2026 | Jul 24, 2026 | | | [CVE-2026-25089](https://cubepath.com/security/cve/CVE-2026-25089) | Fortinet FortiSandbox OS Command Injection Vulnerability Fortinet / FortiSandbox | Jul 16, 2026 | Jul 19, 2026 | | | [CVE-2026-39808](https://cubepath.com/security/cve/CVE-2026-39808) | Fortinet FortiSandbox OS Command Injection Vulnerability Fortinet / FortiSandbox | Jul 16, 2026 | Jul 19, 2026 | | | [CVE-2026-58644](https://cubepath.com/security/cve/CVE-2026-58644) | Microsoft SharePoint Deserialization of Untrusted Data Vulnerability Microsoft / SharePoint | Jul 16, 2026 | Jul 19, 2026 | | | [CVE-2023-4346](https://cubepath.com/security/cve/CVE-2023-4346) | KNX Association KNX Protocol Connection Authorization Option 1 Overly Restrictive Account Lockout Mechanism Vulnerability KNX Association / KNX Protocol Connection Authorization Option 1 | Jul 15, 2026 | Jul 29, 2026 | | | [CVE-2026-46817](https://cubepath.com/security/cve/CVE-2026-46817) | Oracle E-Business Suite Improper Privilege Management Vulnerability Oracle / E-Business Suite | Jul 15, 2026 | Jul 18, 2026 | | | [CVE-2026-15409](https://cubepath.com/security/cve/CVE-2026-15409) | SonicWall SMA1000 Appliances Server-Side Request Forgery Vulnerability SonicWall / SMA1000 Appliances | Jul 14, 2026 | Jul 17, 2026 | Known | | [CVE-2026-15410](https://cubepath.com/security/cve/CVE-2026-15410) | SonicWall SMA1000 Appliances Code Injection Vulnerability SonicWall / SMA1000 Appliances | Jul 14, 2026 | Jul 17, 2026 | Known | | [CVE-2026-56155](https://cubepath.com/security/cve/CVE-2026-56155) | Microsoft Active Directory Federation Services Insufficient Granularity of Access Control Vulnerability Microsoft / Active Directory Federation Services | Jul 14, 2026 | Jul 28, 2026 | | | [CVE-2026-56164](https://cubepath.com/security/cve/CVE-2026-56164) | Microsoft SharePoint Server Missing Authentication for Critical Function Vulnerability Microsoft / SharePoint Server | Jul 14, 2026 | Jul 17, 2026 | | | [CVE-2008-4128](https://cubepath.com/security/cve/CVE-2008-4128) | Cisco IOS Cross-Site Request Forgery Vulnerability Cisco / IOS | Jul 13, 2026 | Jul 16, 2026 | | | [CVE-2026-48939](https://cubepath.com/security/cve/CVE-2026-48939) | iCagenda Unrestricted Upload of File with Dangerous Type Vulnerability iCagenda / iCagenda | Jul 10, 2026 | Jul 13, 2026 | | | [CVE-2026-56291](https://cubepath.com/security/cve/CVE-2026-56291) | Balbooa Forms Unrestricted Upload of File with Dangerous Type Vulnerability Balbooa / Forms | Jul 10, 2026 | Jul 13, 2026 | | | [CVE-2026-48282](https://cubepath.com/security/cve/CVE-2026-48282) | Adobe ColdFusion Path Traversal Vulnerability Adobe / ColdFusion | Jul 7, 2026 | Jul 10, 2026 | | | [CVE-2026-48908](https://cubepath.com/security/cve/CVE-2026-48908) | JoomShaper SP Page Builder Unrestricted Upload of File with Dangerous Type Vulnerability JoomShaper / SP Page Builder | Jul 7, 2026 | Jul 10, 2026 | | | [CVE-2026-55255](https://cubepath.com/security/cve/CVE-2026-55255) | Langflow Authorization Bypass Through User-Controlled Key Vulnerability Langflow / Langflow | Jul 7, 2026 | Jul 10, 2026 | | | [CVE-2026-56290](https://cubepath.com/security/cve/CVE-2026-56290) | Joomlack Page Builder Improper Access Control Vulnerability Joomlack / Page Builder | Jul 7, 2026 | Jul 10, 2026 | | | [CVE-2026-45659](https://cubepath.com/security/cve/CVE-2026-45659) | Microsoft SharePoint Server Deserialization of Untrusted Data Vulnerability Microsoft / SharePoint Server | Jul 1, 2026 | Jul 4, 2026 | Known | | [CVE-2026-48558](https://cubepath.com/security/cve/CVE-2026-48558) | SimpleHelp Authentication Bypass Vulnerability SimpleHelp / SimpleHelp | Jun 29, 2026 | Jul 2, 2026 | | | [CVE-2026-12569](https://cubepath.com/security/cve/CVE-2026-12569) | PTC Windchill and FlexPLM Improper Input Validation Vulnerability PTC / Windchill and FlexPLM | Jun 25, 2026 | Jun 28, 2026 | Known | | [CVE-2026-20230](https://cubepath.com/security/cve/CVE-2026-20230) | Cisco Unified Communications Manager Server-Side Request Forgery (SSRF) Vulnerability Cisco / Unified Communications Manager | Jun 25, 2026 | Jun 28, 2026 | | | [CVE-2025-67038](https://cubepath.com/security/cve/CVE-2025-67038) | Lantronix EDS5000 Code Injection Vulnerability Lantronix / EDS5000 | Jun 23, 2026 | Jun 26, 2026 | | | [CVE-2026-34908](https://cubepath.com/security/cve/CVE-2026-34908) | Ubiquiti UniFi OS Improper Access Control Vulnerability Ubiquiti / UniFi OS | Jun 23, 2026 | Jun 26, 2026 | | | [CVE-2026-34909](https://cubepath.com/security/cve/CVE-2026-34909) | Ubiquiti UniFi OS Path Traversal Vulnerability Ubiquiti / UniFi OS | Jun 23, 2026 | Jun 26, 2026 | | | [CVE-2026-34910](https://cubepath.com/security/cve/CVE-2026-34910) | Ubiquiti UniFi OS Improper Input Validation Vulnerability Ubiquiti / UniFi OS | Jun 23, 2026 | Jun 26, 2026 | | | [CVE-2026-20253](https://cubepath.com/security/cve/CVE-2026-20253) | Splunk Enterprise Missing Authentication for Critical Function Vulnerability Splunk / Enterprise | Jun 18, 2026 | Jun 21, 2026 | | | [CVE-2026-48907](https://cubepath.com/security/cve/CVE-2026-48907) | Widget Factory Joomla Content Editor Improper Access Control Vulnerability Widget Factory / Joomla Content Editor | Jun 16, 2026 | Jun 19, 2026 | | | [CVE-2026-20262](https://cubepath.com/security/cve/CVE-2026-20262) | Cisco Catalyst SD-WAN Manager Directory or Path Traversal Vulnerability Cisco / Catalyst SD-WAN Manager | Jun 15, 2026 | Jun 29, 2026 | | | [CVE-2026-54420](https://cubepath.com/security/cve/CVE-2026-54420) | LiteSpeed cPanel Plugin UNIX Symbolic Link (Symlink) Following Vulnerability LiteSpeed / cPanel Plugin | Jun 15, 2026 | Jun 18, 2026 | | | [CVE-2026-35273](https://cubepath.com/security/cve/CVE-2026-35273) | Oracle PeopleSoft Enterprise PeopleTools Missing Authentication for Critical Function Vulnerability Oracle / PeopleSoft Enterprise PeopleTools | Jun 12, 2026 | Jun 15, 2026 | Known | | [CVE-2026-10520](https://cubepath.com/security/cve/CVE-2026-10520) | Ivanti Sentry OS Command Injection Vulnerability Ivanti / Sentry | Jun 11, 2026 | Jun 14, 2026 | | | [CVE-2026-11645](https://cubepath.com/security/cve/CVE-2026-11645) | Google Chromium V8 Out-of-Bounds Read and Write Vulnerability Google / Chromium V8 | Jun 9, 2026 | Jun 23, 2026 | | | [CVE-2026-20245](https://cubepath.com/security/cve/CVE-2026-20245) | Cisco Catalyst SD-WAN Manager Improper Encoding or Escaping of Output Vulnerability Cisco / Catalyst SD-WAN Manager | Jun 9, 2026 | Jun 23, 2026 | | | [CVE-2026-7473](https://cubepath.com/security/cve/CVE-2026-7473) | Arista Extensible Operating System Incomplete Comparison with Missing Factors Vulnerability Arista / Extensible Operating System | Jun 9, 2026 | Jun 23, 2026 | | | [CVE-2026-42271](https://cubepath.com/security/cve/CVE-2026-42271) | BerriAI LiteLLM Command Injection Vulnerability BerriAI / LiteLLM | Jun 8, 2026 | Jun 22, 2026 | | | [CVE-2026-50751](https://cubepath.com/security/cve/CVE-2026-50751) | Check Point Security Gateway Improper Authentication Vulnerability Check Point / Security Gateway | Jun 8, 2026 | Jun 11, 2026 | Known | | [CVE-2026-28318](https://cubepath.com/security/cve/CVE-2026-28318) | SolarWinds Serv-U Uncontrolled Resource Consumption Vulnerability SolarWinds / Serv-U | Jun 5, 2026 | Jun 19, 2026 | | | [CVE-2026-45247](https://cubepath.com/security/cve/CVE-2026-45247) | Mirasvit Full Page Cache Warmer Deserialization of Untrusted Data Vulnerability Mirasvit / Mirasvit Full Page Cache Warmer | Jun 3, 2026 | Jun 6, 2026 | | | [CVE-2022-0492](https://cubepath.com/security/cve/CVE-2022-0492) | Linux Kernel Improper Authentication Vulnerability Linux / Kernel | Jun 2, 2026 | Jun 5, 2026 | | | [CVE-2025-48595](https://cubepath.com/security/cve/CVE-2025-48595) | Android Framework Integer Overflow Vulnerability Android / Framework | Jun 2, 2026 | Jun 5, 2026 | | | [CVE-2024-21182](https://cubepath.com/security/cve/CVE-2024-21182) | Oracle WebLogic Server Unspecified Vulnerability Oracle / WebLogic Server | Jun 1, 2026 | Jun 4, 2026 | | | [CVE-2026-0257](https://cubepath.com/security/cve/CVE-2026-0257) | Palo Alto Networks PAN-OS Authentication Bypass Vulnerability Palo Alto Networks / PAN-OS | May 29, 2026 | Jun 1, 2026 | Known | | [CVE-2026-45321](https://cubepath.com/security/cve/CVE-2026-45321) | TanStack Unspecified Vulnerability TanStack / TanStack | May 27, 2026 | Jun 10, 2026 | Known | | [CVE-2026-48027](https://cubepath.com/security/cve/CVE-2026-48027) | Nx Console Embedded Malicious Code Vulnerability Nx / Nx Console | May 27, 2026 | Jun 10, 2026 | Known | | [CVE-2026-8398](https://cubepath.com/security/cve/CVE-2026-8398) | Daemon Tools Lite Embedded Malicious Code Vulnerability Daemon / Daemon Tools Lite | May 27, 2026 | May 30, 2026 | | | [CVE-2026-48172](https://cubepath.com/security/cve/CVE-2026-48172) | LiteSpeed cPanel Plugin Privilege Escalation Vulnerability LiteSpeed / cPanel Plugin | May 26, 2026 | May 29, 2026 | | | [CVE-2026-9082](https://cubepath.com/security/cve/CVE-2026-9082) | Drupal Core SQL Injection Vulnerability Drupal / Core | May 22, 2026 | May 27, 2026 | | | [CVE-2025-34291](https://cubepath.com/security/cve/CVE-2025-34291) | Langflow Origin Validation Error Vulnerability Langflow / Langflow | May 21, 2026 | Jun 4, 2026 | | | [CVE-2026-34926](https://cubepath.com/security/cve/CVE-2026-34926) | Trend Micro Apex One (On-Premise) Directory Traversal Vulnerability Trend Micro / Apex One | May 21, 2026 | Jun 4, 2026 | | | [CVE-2008-4250](https://cubepath.com/security/cve/CVE-2008-4250) | Microsoft Windows Buffer Overflow Vulnerability Microsoft / Windows | May 20, 2026 | Jun 3, 2026 | | | [CVE-2009-1537](https://cubepath.com/security/cve/CVE-2009-1537) | Microsoft DirectX NULL Byte Overwrite Vulnerability Microsoft / DirectX | May 20, 2026 | Jun 3, 2026 | | | [CVE-2009-3459](https://cubepath.com/security/cve/CVE-2009-3459) | Adobe Acrobat and Reader Heap-Based Buffer Overflow Vulnerability Adobe / Acrobat and Reader | May 20, 2026 | Jun 3, 2026 | | | [CVE-2010-0249](https://cubepath.com/security/cve/CVE-2010-0249) | Microsoft Internet Explorer Use-After-Free Vulnerability Microsoft / Internet Explorer | May 20, 2026 | Jun 3, 2026 | | | [CVE-2010-0806](https://cubepath.com/security/cve/CVE-2010-0806) | Microsoft Internet Explorer Use-After-Free Vulnerability Microsoft / Internet Explorer | May 20, 2026 | Jun 3, 2026 | | | [CVE-2026-41091](https://cubepath.com/security/cve/CVE-2026-41091) | Microsoft Defender Link Following Vulnerability Microsoft / Defender | May 20, 2026 | Jun 3, 2026 | | | [CVE-2026-45498](https://cubepath.com/security/cve/CVE-2026-45498) | Microsoft Defender Denial of Service Vulnerability Microsoft / Defender | May 20, 2026 | Jun 3, 2026 | | | [CVE-2026-42897](https://cubepath.com/security/cve/CVE-2026-42897) | Microsoft Exchange Server Cross-Site Scripting Vulnerability Microsoft / Microsoft | May 15, 2026 | May 29, 2026 | | | [CVE-2026-20182](https://cubepath.com/security/cve/CVE-2026-20182) | Cisco Catalyst SD-WAN Controller Authentication Bypass Vulnerability Cisco / Catalyst SD-WAN | May 14, 2026 | May 17, 2026 | | | [CVE-2026-42208](https://cubepath.com/security/cve/CVE-2026-42208) | BerriAI LiteLLM SQL Injection Vulnerability BerriAI / LiteLLM | May 8, 2026 | May 11, 2026 | | | [CVE-2026-6973](https://cubepath.com/security/cve/CVE-2026-6973) | Ivanti Endpoint Manager Mobile (EPMM) Improper Input Validation Vulnerability Ivanti / Endpoint Manager Mobile (EPMM) | May 7, 2026 | May 10, 2026 | | | [CVE-2026-0300](https://cubepath.com/security/cve/CVE-2026-0300) | Palo Alto Networks PAN-OS Out-of-bounds Write Vulnerability Palo Alto Networks / PAN-OS | May 6, 2026 | May 9, 2026 | | | [CVE-2026-31431](https://cubepath.com/security/cve/CVE-2026-31431) | Linux Kernel Incorrect Resource Transfer Between Spheres Vulnerability Linux / Kernel | May 1, 2026 | May 15, 2026 | | | [CVE-2026-41940](https://cubepath.com/security/cve/CVE-2026-41940) | WebPros cPanel & WHM and WP2 (WordPress Squared) Missing Authentication for Critical Function Vulnerability WebPros / cPanel & WHM and WP2 (WordPress Squared) | Apr 30, 2026 | May 3, 2026 | Known | | [CVE-2024-1708](https://cubepath.com/security/cve/CVE-2024-1708) | ConnectWise ScreenConnect Path Traversal Vulnerability ConnectWise / ScreenConnect | Apr 28, 2026 | May 12, 2026 | Known | | [CVE-2026-32202](https://cubepath.com/security/cve/CVE-2026-32202) | Microsoft Windows Protection Mechanism Failure Vulnerability Microsoft / Windows | Apr 28, 2026 | May 12, 2026 | | | [CVE-2024-57726](https://cubepath.com/security/cve/CVE-2024-57726) | SimpleHelp Missing Authorization Vulnerability SimpleHelp / SimpleHelp | Apr 24, 2026 | May 8, 2026 | Known | | [CVE-2024-57728](https://cubepath.com/security/cve/CVE-2024-57728) | SimpleHelp Path Traversal Vulnerability SimpleHelp / SimpleHelp | Apr 24, 2026 | May 8, 2026 | Known | | [CVE-2024-7399](https://cubepath.com/security/cve/CVE-2024-7399) | Samsung MagicINFO 9 Server Path Traversal Vulnerability Samsung / MagicINFO 9 Server | Apr 24, 2026 | May 8, 2026 | | | [CVE-2025-29635](https://cubepath.com/security/cve/CVE-2025-29635) | D-Link DIR-823X Command Injection Vulnerability D-Link / DIR-823X | Apr 24, 2026 | May 8, 2026 | | | [CVE-2026-39987](https://cubepath.com/security/cve/CVE-2026-39987) | Marimo Remote Code Execution Vulnerability Marimo / Marimo | Apr 23, 2026 | May 7, 2026 | | | [CVE-2026-33825](https://cubepath.com/security/cve/CVE-2026-33825) | Microsoft Defender Insufficient Granularity of Access Control Vulnerability Microsoft / Defender | Apr 22, 2026 | May 6, 2026 | Known | | [CVE-2023-27351](https://cubepath.com/security/cve/CVE-2023-27351) | PaperCut NG/MF Improper Authentication Vulnerability PaperCut / NG/MF | Apr 20, 2026 | May 4, 2026 | Known | | [CVE-2024-27199](https://cubepath.com/security/cve/CVE-2024-27199) | JetBrains TeamCity Relative Path Traversal Vulnerability JetBrains / TeamCity | Apr 20, 2026 | May 4, 2026 | Known | | [CVE-2025-2749](https://cubepath.com/security/cve/CVE-2025-2749) | Kentico Xperience Path Traversal Vulnerability Kentico / Kentico Xperience | Apr 20, 2026 | May 4, 2026 | | | [CVE-2025-32975](https://cubepath.com/security/cve/CVE-2025-32975) | Quest KACE Systems Management Appliance (SMA) Improper Authentication Vulnerability Quest / KACE Systems Management Appliance (SMA) | Apr 20, 2026 | May 4, 2026 | | [Newer](https://cubepath.com/security/cve/kev) Page 2 of 18 [Older](https://cubepath.com/security/cve/kev?page=3) Data from the CVE Program (MITRE), CISA KEV and FIRST EPSS. CVSS is owned by FIRST and used by permission. Not affiliated with or endorsed by MITRE, CISA or FIRST. [Sources and licenses](https://cubepath.com/security/cve/legal)