{"vulnerability": "CVE-2025-32975", "sightings": [{"uuid": "48ccc9b8-0e7d-4453-bbc0-99d11a08d083", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2025-32975", "type": "seen", "source": "https://infosec.exchange/users/cR0w/statuses/114773849144656809", "content": "", "creation_timestamp": "2025-06-30T18:59:14.529930Z"}, {"uuid": "f33c484f-8ef5-4c9f-abc0-a9ecb2fe630a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-32975", "type": "seen", "source": "https://bsky.app/profile/nimblenerd.social/post/3lsd5rwjf3c22", "content": "", "creation_timestamp": "2025-06-24T03:29:33.491475Z"}, {"uuid": "428827e7-94e1-4fd2-9431-1d4fc8d3846f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-32975", "type": "seen", "source": "https://schleuss.online/users/vulnbot/statuses/114736233551699855", "content": "", "creation_timestamp": "2025-06-24T03:33:07.946768Z"}, {"uuid": "0ca4e1b1-d897-4c45-8e1f-f9f3d1c72c80", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-32975", "type": "seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/3lsdfedigb42y", "content": "", "creation_timestamp": "2025-06-24T05:45:06.359910Z"}, {"uuid": "5aa27315-ead9-445d-a2a7-f16bb86db926", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-32975", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lsejqqan3p25", "content": "", "creation_timestamp": "2025-06-24T16:36:17.515421Z"}, {"uuid": "604cc26a-da4f-4c0d-93c6-3141a6b3ed44", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-32975", "type": "seen", "source": "https://bsky.app/profile/hacker.at.thenote.app/post/3lsfkwyywd22h", "content": "", "creation_timestamp": "2025-06-25T02:30:21.232923Z"}, {"uuid": "07fb233d-01c3-4c5b-8f5a-2013cb0df10a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-32975", "type": "seen", "source": "https://bsky.app/profile/cybersecurity0001.bsky.social/post/3mhpsijkcg725", "content": "", "creation_timestamp": "2026-03-23T10:01:07.426979Z"}, {"uuid": "14ba75e1-98c1-46b8-9609-2803f7ad15fd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-32975", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/116269884350880404", "content": "", "creation_timestamp": "2026-03-22T00:00:42.231724Z"}, {"uuid": "1305107b-1733-4694-b852-5aa29b550535", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-32975", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mhmahy2jae2m", "content": "", "creation_timestamp": "2026-03-22T00:00:42.577313Z"}, {"uuid": "97f7dd1b-a5b1-4bf2-80bc-f23275af108f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-32975", "type": "seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/3mhqkij6g3g2r", "content": "", "creation_timestamp": "2026-03-23T17:10:36.586846Z"}, {"uuid": "dcd434fc-2db0-439b-8b94-eaac4e46c24b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-32975", "type": "seen", "source": "https://bsky.app/profile/opsmatters.com/post/3mhhn5tay3f2l", "content": "", "creation_timestamp": "2026-03-20T04:04:21.249798Z"}, {"uuid": "8d2eaf7e-ee5c-4630-a549-6cee9c571995", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-32975", "type": "seen", "source": "https://bsky.app/profile/solomonneas.dev/post/3mibmij4gwi2f", "content": "", "creation_timestamp": "2026-03-30T12:01:39.326101Z"}, {"uuid": "4b49f391-3b6f-4928-b9f8-2e57ecbd3d92", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-32975", "type": "seen", "source": "https://bsky.app/profile/hacker.at.thenote.app/post/3mhqyw5pagk23", "content": "", "creation_timestamp": "2026-03-23T21:28:47.199306Z"}, {"uuid": "1c1772c0-45bc-45b3-985e-f4b0bc3e60de", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-32975", "type": "seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/3mhshycqep62x", "content": "", "creation_timestamp": "2026-03-24T11:31:07.438751Z"}, {"uuid": "41d810dd-5cc8-4a44-9d0e-28bdd705472a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-32975", "type": "seen", "source": "https://bsky.app/profile/techsentiments.com/post/3mhq3auc6a526", "content": "", "creation_timestamp": "2026-03-23T12:37:53.263902Z"}, {"uuid": "db0831ee-31cb-486d-81ac-d0868059881e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-32975", "type": "seen", "source": "https://bsky.app/profile/infosecbriefly.bsky.social/post/3mhkvokekjz2v", "content": "", "creation_timestamp": "2026-03-21T11:14:51.729143Z"}, {"uuid": "34f2dcb7-f30c-43e0-bd0e-ecbccc0fd3d2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-32975", "type": "seen", "source": "https://bsky.app/profile/hendryadrian.bsky.social/post/3mhkya35wjo22", "content": "", "creation_timestamp": "2026-03-21T12:00:27.217064Z"}, {"uuid": "d9e5e463-59e5-4f56-8577-f2f9433f8f08", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-32975", "type": "seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3mhkyznv6mtj2", "content": "", "creation_timestamp": "2026-03-21T12:15:16.571958Z"}, {"uuid": "9c67725b-204c-4504-ac6e-4e1c0fbce2a8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-32975", "type": "seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3mhjg3d66yg2q", "content": "", "creation_timestamp": "2026-03-20T21:03:01.881906Z"}, {"uuid": "ad033a15-eb28-4eab-96c7-7d2b0931c31f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-32975", "type": "seen", "source": "https://bsky.app/profile/allsafeus.bsky.social/post/3mhl772s3sm2w", "content": "", "creation_timestamp": "2026-03-21T14:05:09.937554Z"}, {"uuid": "0ee8dcf1-ff35-4b9f-bdf9-c49f6c3d2d50", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2025-32975", "type": "seen", "source": "https://ccb.belgium.be/advisories/warning-critical-vulnerabilities-found-quest-kace-systems-management-appliance-patch", "content": "", "creation_timestamp": "2026-03-20T17:31:58.000000Z"}, {"uuid": "15104937-0805-4506-a232-f2c3c98798a1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-32975", "type": "seen", "source": "https://bsky.app/profile/eyalestrin.bsky.social/post/3mhrzlovtn42g", "content": "", "creation_timestamp": "2026-03-24T07:13:28.726818Z"}, {"uuid": "dbe53618-47ab-400f-a6f1-970024bdc8ff", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-32975", "type": "seen", "source": "https://bsky.app/profile/reconbee.bsky.social/post/3mhpiikfmwc2b", "content": "", "creation_timestamp": "2026-03-23T07:02:17.312202Z"}, {"uuid": "db071f27-7af2-42cd-b5dc-35ff3ae603fa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-32975", "type": "seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/3mhpk6ebvjs2j", "content": "", "creation_timestamp": "2026-03-23T07:32:16.073612Z"}, {"uuid": "3445525c-a9e9-4583-859e-0f87d043406b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-32975", "type": "seen", "source": "https://bsky.app/profile/allsafeus.bsky.social/post/3mhpl4pruq72z", "content": "", "creation_timestamp": "2026-03-23T07:49:16.662487Z"}, {"uuid": "07091c74-7799-4abe-847b-c0265783bfd4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-32975", "type": "seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3mhplnh2gdhe2", "content": "", "creation_timestamp": "2026-03-23T07:58:39.259196Z"}, {"uuid": "129cf9a6-1aa7-426c-8110-bb8fc7b87a3d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-32975", "type": "seen", "source": "https://bsky.app/profile/hendryadrian.bsky.social/post/3mhplqq5m4q2q", "content": "", "creation_timestamp": "2026-03-23T08:00:26.367935Z"}, {"uuid": "8c28908e-e87b-44e9-b643-ee47b0b908b2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-32975", "type": "seen", "source": "https://thehackernews.com/2026/03/hackers-exploit-cve-2025-32975-cvss-100.html", "content": "", "creation_timestamp": "2026-03-23T05:15:00.000000Z"}, {"uuid": "442bcdf9-7c15-4274-ae09-e03a5e09f5ad", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-32975", "type": "seen", "source": "https://bsky.app/profile/ninjaowl.ai/post/3mhq5yhwjs42k", "content": "", "creation_timestamp": "2026-03-23T13:26:53.478154Z"}, {"uuid": "ff1d1b9c-4a7e-4db9-b2a4-4f35a838922b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-32975", "type": "seen", "source": "https://bsky.app/profile/it4intserver.bsky.social/post/3mhpmqnqvk42e", "content": "", "creation_timestamp": "2026-03-23T08:18:18.472065Z"}, {"uuid": "2ed1ff86-915c-491b-bb87-6fd624353342", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-32975", "type": "seen", "source": "https://bsky.app/profile/danykaswanson.technodon.org.ap.brid.gy/post/3mhqdgaywpek2", "content": "", "creation_timestamp": "2026-03-23T15:04:08.947504Z"}, {"uuid": "9a2b09c0-60ce-4066-9598-9767cf0326e9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2025-32975", "type": "seen", "source": "https://mastodon.social/ap/users/115426718704364579/statuses/116279164488002845", "content": "", "creation_timestamp": "2026-03-23T15:20:44.175201Z"}, {"uuid": "e1067791-c3e2-4865-8435-c9fc54b8b9af", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-32975", "type": "seen", "source": "https://bsky.app/profile/giuliosistilli.bsky.social/post/3mhpsame34p2o", "content": "", "creation_timestamp": "2026-03-23T09:56:41.699385Z"}, {"uuid": "c498ed04-e4ae-433b-a8f5-08d84d26fd03", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-32975", "type": "seen", "source": "https://bsky.app/profile/netsecio.bsky.social/post/3mhqeeqbful2w", "content": "", "creation_timestamp": "2026-03-23T15:21:06.967965Z"}, {"uuid": "945f0562-d2a6-4a55-a5a8-b5cf23dc1bb9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2025-32975", "type": "seen", "source": "https://gist.github.com/joetustin-cyera/c7d3ab11a87c1c714cd1a843a1a3b91c", "content": "", "creation_timestamp": "2026-03-30T22:31:06.000000Z"}, {"uuid": "8acba3ef-fd19-433f-93cc-a06baf446083", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2025-32975", "type": "seen", "source": "https://infosec.exchange/users/patrickcmiller/statuses/116329386316184671", "content": "", "creation_timestamp": "2026-04-01T12:12:48.447021Z"}, {"uuid": "73257e74-adf9-43a4-9b8d-0a8f86ca3a42", "vulnerability_lookup_origin": "405284c2-e461-4670-8979-7fd2c9755a60", "author": "af0120d0-3dac-4a6a-974b-a9f33d2a9846", "vulnerability": "CVE-2025-32975", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/e2c5193f-40df-49c6-b591-2e9cb2d4dfeb", "content": "", "creation_timestamp": "2026-04-20T20:00:03.601888Z"}, {"uuid": "e2142465-d659-430c-ab72-86f18874d9a7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-32975", "type": "exploited", "source": "Telegram/obsWFVncZDw2N_JUP8CjvP-2QXqVkQr0tRz9OGb2G1Zqzg", "content": "", "creation_timestamp": "2026-03-23T23:57:55.000000Z"}, {"uuid": "bedcc3fe-edc1-4fd3-b47d-63b79a9c7099", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-32975", "type": "exploited", "source": "https://t.me/thehackernews/8649", "content": "\u26a0\ufe0f Attackers are exploiting a CVSS 10.0 auth bypass in Quest KACE SMA to hijack admin accounts.\n\nArctic Wolf observed attacks on unpatched, internet-exposed systems, with payloads delivered via curl and persistence set through registry changes.\n\n\ud83d\udd17 From initial access to full domain control chain \u2192 https://thehackernews.com/2026/03/hackers-exploit-cve-2025-32975-cvss-100.html", "creation_timestamp": "2026-03-23T06:44:48.000000Z"}, {"uuid": "ba22839e-0e94-4d64-a1a0-4024000fe86f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-32975", "type": "exploited", "source": "https://t.me/information_security_channel/55028", "content": "Critical Quest KACE Vulnerability Potentially Exploited in Attacks\nhttps://www.securityweek.com/critical-quest-kace-vulnerability-potentially-exploited-in-attacks/\n\nThe vulnerability is tracked as CVE-2025-32975 and it may have been exploited in attacks against the education sector.\nThe post Critical Quest KACE Vulnerability Potentially Exploited in Attacks (https://www.securityweek.com/critical-quest-kace-vulnerability-potentially-exploited-in-attacks/) appeared first on SecurityWeek (https://www.securityweek.com/).", "creation_timestamp": "2026-03-22T01:56:00.000000Z"}, {"uuid": "ba799440-3b4f-43b7-aea0-2436eddbec7d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-32975", "type": "exploited", "source": "https://t.me/cibsecurity/88857", "content": "\ud83d\udd8b\ufe0f Hackers Exploit CVE-2025-32975 (CVSS 10.0) to Hijack Unpatched Quest KACE SMA Systems \ud83d\udd8b\ufe0f\n\nThreat actors are suspected to be exploiting a maximumseverity security flaw impacting Quest KACE Systems Management Appliance SMA, according to Arctic Wolf. The cybersecurity company said it observed malicious activity starting the week of March 9, 2026, in customer environments that's consistent with the exploitation of CVE202532975 on unpatched SMA systems exposed to the internet. It's.\n\n\ud83d\udcd6 Read more.\n\n\ud83d\udd17 Via \"The Hacker News\"\n\n----------\n\ud83d\udc41\ufe0f Seen on @cibsecurity", "creation_timestamp": "2026-03-23T12:34:22.000000Z"}, {"uuid": "a9cd7b9f-a341-4aeb-9a82-8c471af2c5a5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-32975", "type": "exploited", "source": "https://t.me/TengkorakCyberCrewzz/9168", "content": "Hackers Exploit CVE-2025-32975 (CVSS 10.0) to Hijack Unpatched Quest KACE SMA Systems \u2013 thehackernews.com\n\nMon, 23 Mar 2026 14:15:00", "creation_timestamp": "2026-03-23T08:03:33.000000Z"}, {"uuid": "47e18b4a-aa29-4771-92f4-2a34348dc060", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-32975", "type": "exploited", "source": "https://t.me/TengkorakCyberCrewzz/39029", "content": "Hackers Exploit CVE-2025-32975 (CVSS 10.0) to Hijack Unpatched Quest KACE SMA Systems \u2013 thehackernews.com\n\nMon, 23 Mar 2026 14:15:00", "creation_timestamp": "2026-03-23T08:03:33.000000Z"}, {"uuid": "f214bbc0-5578-429e-9be2-7261d6e3593b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-32975", "type": "exploited", "source": "https://t.me/ctinow/247554", "content": "Hackers Exploit CVE-2025-32975 (CVSS 10.0) to Hijack Unpatched Quest KACE SMA Systems\nhttps://ift.tt/yHXoQC2", "creation_timestamp": "2026-03-23T07:04:07.000000Z"}, {"uuid": "6915da72-1c35-412a-9e75-467f62a6e2c5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-32975", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/19351", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-32978\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: Quest KACE Systems Management Appliance (SMA) 13.0.x before 13.0.385, 13.1.x before 13.1.81, 13.2.x before 13.2.183, 14.0.x before 14.0.341 (Patch 5), and 14.1.x before 14.1.101 (Patch 4) allows unauthenticated users to replace system licenses through a web interface intended for license renewal. Attackers can exploit this to replace valid licenses with expired or trial licenses, causing denial of service.\n\ud83d\udccf Published: 2025-06-24T00:00:00.000Z\n\ud83d\udccf Modified: 2025-06-24T14:24:10.819Z\n\ud83d\udd17 References:\n1. https://support.quest.com/kb/4379499/quest-response-to-kace-sma-vulnerabilities-cve-2025-32975-cve-2025-32976-cve-2025-32977-cve-2025-32978\n2. https://seralys.com/research/CVE-2025-32978.txt\n3. https://seclists.org/fulldisclosure/2025/Jun/25", "creation_timestamp": "2025-06-24T14:46:39.000000Z"}, {"uuid": "bf242878-1a8e-48ba-8187-4c84490cc015", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-32975", "type": "seen", "source": "https://t.me/CyberDispatch/1348", "content": "CISA Adds 8 Actively Exploited Vulnerabilities to KEV Catalog\n\nThe U.S. Cybersecurity and Infrastructure Security Agency (CISA) urgently added eight zero-day vulnerabilities to its Known Exploited Vulnerabilities (KEV) catalog on April 20, 2026, confirming active exploitation across enterprise tools from Cisco, Quest, PaperCut, TeamCity, Kentico, and Zimbra.\n\nKey flaws include three Cisco SD-WAN vulnerabilities\u2014CVE-2026-20127 (authentication bypass), CVE-2022-20775 (privilege escalation), and CVE-2026-20133 (sensitive info exposure)\u2014plus CVE-2025-32975 (CVSS 10.0) in Quest KACE SMA, enabling full user impersonation without credentials.\n\nOthers: CVE-2023-27351 (PaperCut improper auth, CVSS 8.2); CVE-2024-27199 (TeamCity path traversal, CVSS 7.3); CVE-2025-2749 (Kentico path traversal, CVSS 7.2).", "creation_timestamp": "2026-08-29T20:00:17.117043Z"}, {"uuid": "5dc13d22-8313-4055-ba66-2782e0e4d781", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-32975", "type": "seen", "source": "https://bsky.app/profile/termsofsurrender.bsky.social/post/3mlpcsvjhzy2v", "content": "Quest KACE Breach: Your Security Posture is Powered by Historical Irony and Bad Code.\nPANIC 95% | Lag 0.0h | The critical CVE-2025-32975 flaw in Quest KACE SMA allowed unauthenticated remote access, exposing a\n#AfterShockIndex\nREAD MORE", "creation_timestamp": "2026-05-13T03:01:21.441879Z"}, {"uuid": "cdb29fa2-01e2-43ce-bd41-54bc0a6878a8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-32975", "type": "seen", "source": "https://t.me/ctinow/250210", "content": "Quest KACE SMA flaw CVE-2025-32975: when one unpatched tool opens the door to 60 organizations\nhttps://ift.tt/Yad3BQJ", "creation_timestamp": "2026-05-13T14:14:19.000000Z"}, {"uuid": "4e71de5f-3491-437b-b667-a5240a773785", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-32975", "type": "seen", "source": "Telegram/2iWmxn8sF8uvllY7SglfH4BAW00OwC6EaLFOwAT3mqrREhQU", "content": "", "creation_timestamp": "2026-05-13T14:20:06.000000Z"}, {"uuid": "832cdaf2-50cf-41cf-bf64-93314e2fed93", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-32975", "type": "seen", "source": "https://t.me/VulnerabilityNews/42060", "content": "CISA Adds Eight Known Exploited Vulnerabilities to Catalog\n\nCISA has added eight new vulnerabilities to its Known Exploited Vulnerabilities (KEV) Catalog, based on evidence of active exploitation.\u00a0\nCVE-2023-27351 PaperCut NG/MF Improper Authentication Vulnerability\nCVE-2024-27199 JetBrains TeamCity Relative Path Traversal Vulnerability\nCVE-2025-2749 Kentico Xperience Path Traversal Vulnerability\nCVE-2025-32975 Quest KACE Systems Management Appliance (SMA) Improper Authentication Vulnerability\nCVE-2025-48700 Synacor Zimbra Collaboration Suite (ZCS) Cross-site Scripting Vulnerability\nCVE-2026-20122 Cisco Catalyst SD-WAN Manager Incorrect Use of Privileged APIs Vulnerability\nCVE-2026-20128 Cisco Catalyst SD-WAN Manager Storing Passwords in a Recoverable Format Vulnerability\nCVE-2026-20133 Cisco Catalyst SD-WAN Manager Exposure of Sensitive Information to an Unauthorized Actor Vulnerability\nThese types of vulnerabilities are frequent attack vectors for malicious cyber actors and pose significant risks to the federal enterprise.\u00a0\nBinding Operational Directive (BOD) 22-01: Reducing the Significant Risk of Known Exploited Vulnerabilities established the KEV Catalog as a living list of known Common Vulnerabilities and Exposures (CVEs) that carry significant risk to the federal enterprise. BOD 22-01 requires Federal Civilian Executive Branch (FCEB) agencies to remediate identified vulnerabilities by the due date to protect FCEB networks against active threats. See the BOD 22-01 Fact Sheet for more information.\u00a0\nAlthough BOD 22-01 only applies to FCEB agencies, CISA strongly urges all organizations to reduce their exposure to cyberattacks by prioritizing timely remediation of KEV Catalog vulnerabilities as part of their vulnerability management practice. CISA will continue to add vulnerabilities to the catalog that meet the specified criteria.\nhttps://www.cisa.gov/news-events/alerts/2026/04/20/cisa-adds-eight-known-exploited-vulnerabilities-catalog", "creation_timestamp": "2026-08-18T19:00:04.349063Z"}, {"uuid": "af976a77-463b-4d71-bdfa-6a2f26acfdda", "vulnerability_lookup_origin": "caeb2787-0d58-4236-9039-7c86c3e566f3", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-32975", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/146cef10-ecb7-4318-96f6-59132cd98aa1", "content": "", "creation_timestamp": "2026-06-19T12:45:13.310788Z"}, {"uuid": "291ea84f-0254-45d1-a4e6-3b898e24f418", "vulnerability_lookup_origin": "caeb2787-0d58-4236-9039-7c86c3e566f3", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-32975", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/b383ad7b-0eab-4115-83e1-35fc614dcd4e", "content": "", "creation_timestamp": "2026-06-23T14:03:39.656187Z"}, {"uuid": "9595fc55-ee13-4fa0-9d18-24a220497fc2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-32975", "type": "exploited", "source": "https://t.me/VulnerabilityNews/42060", "content": "CISA Adds Eight Known Exploited Vulnerabilities to Catalog\n\nCISA has added eight new vulnerabilities to its Known Exploited Vulnerabilities (KEV) Catalog, based on evidence of active exploitation.\u00a0\nCVE-2023-27351 PaperCut NG/MF Improper Authentication Vulnerability\nCVE-2024-27199 JetBrains TeamCity Relative Path Traversal Vulnerability\nCVE-2025-2749 Kentico Xperience Path Traversal Vulnerability\nCVE-2025-32975 Quest KACE Systems Management Appliance (SMA) Improper Authentication Vulnerability\nCVE-2025-48700 Synacor Zimbra Collaboration Suite (ZCS) Cross-site Scripting Vulnerability\nCVE-2026-20122 Cisco Catalyst SD-WAN Manager Incorrect Use of Privileged APIs Vulnerability\nCVE-2026-20128 Cisco Catalyst SD-WAN Manager Storing Passwords in a Recoverable Format Vulnerability\nCVE-2026-20133 Cisco Catalyst SD-WAN Manager Exposure of Sensitive Information to an Unauthorized Actor Vulnerability\nThese types of vulnerabilities are frequent attack vectors for malicious cyber actors and pose significant risks to the federal enterprise.\u00a0\nBinding Operational Directive (BOD) 22-01: Reducing the Significant Risk of Known Exploited Vulnerabilities established the KEV Catalog as a living list of known Common Vulnerabilities and Exposures (CVEs) that carry significant risk to the federal enterprise. BOD 22-01 requires Federal Civilian Executive Branch (FCEB) agencies to remediate identified vulnerabilities by the due date to protect FCEB networks against active threats. See the BOD 22-01 Fact Sheet for more information.\u00a0\nAlthough BOD 22-01 only applies to FCEB agencies, CISA strongly urges all organizations to reduce their exposure to cyberattacks by prioritizing timely remediation of KEV Catalog vulnerabilities as part of their vulnerability management practice. CISA will continue to add vulnerabilities to the catalog that meet the specified criteria.\nhttps://www.cisa.gov/news-events/alerts/2026/04/20/cisa-adds-eight-known-exploited-vulnerabilities-catalog", "creation_timestamp": "2026-08-19T00:00:09.284892Z"}, {"uuid": "8491b4cd-14a6-4e33-9f76-d80553fe1e39", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-32975", "type": "seen", "source": "https://t.me/VulnerabilityNews/41487", "content": "Critical Quest KACE Vulnerability Potentially Exploited in Attacks\n\nThe vulnerability is tracked as CVE-2025-32975 and it may have been exploited in attacks against the education sector.\nThe post Critical Quest KACE Vulnerability Potentially Exploited in Attacks appeared first on SecurityWeek.\nhttps://www.securityweek.com/critical-quest-kace-vulnerability-potentially-exploited-in-attacks/", "creation_timestamp": "2026-07-18T13:00:05.082957Z"}, {"uuid": "4b6eb729-b36b-49e0-b9b1-e6c3489d6b39", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-32975", "type": "exploited", "source": "https://t.me/VulnerabilityNews/41487", "content": "Critical Quest KACE Vulnerability Potentially Exploited in Attacks\n\nThe vulnerability is tracked as CVE-2025-32975 and it may have been exploited in attacks against the education sector.\nThe post Critical Quest KACE Vulnerability Potentially Exploited in Attacks appeared first on SecurityWeek.\nhttps://www.securityweek.com/critical-quest-kace-vulnerability-potentially-exploited-in-attacks/", "creation_timestamp": "2026-07-19T00:00:25.640475Z"}, {"uuid": "5e24a1b4-dcc3-4c2b-b6b2-fd8f819c7aa2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-32975", "type": "seen", "source": "https://t.me/MalaysiaHacktivistz/20230", "content": "Hackers Exploit CVE-2025-32975 (CVSS 10.0) to Hijack Unpatched Quest KACE SMA Systems \u2013 thehackernews.com\n\nMon, 23 Mar 2026 14:15:00", "creation_timestamp": "2026-07-19T16:00:05.855287Z"}, {"uuid": "66d78750-e692-4418-983a-1839e1cba18a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-32975", "type": "exploited", "source": "https://t.me/MalaysiaHacktivistz/20230", "content": "Hackers Exploit CVE-2025-32975 (CVSS 10.0) to Hijack Unpatched Quest KACE SMA Systems \u2013 thehackernews.com\n\nMon, 23 Mar 2026 14:15:00", "creation_timestamp": "2026-07-20T00:00:21.477008Z"}, {"uuid": "c077d1df-5ae8-4bd0-8ddb-44c9a8f30955", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-32975", "type": "exploited", "source": "https://t.me/pphm_HackerNews/1333", "content": "Unsecured Management Infrastructure Creates Expanding Enterprise Exposure\n\nCybersecurity researchers are warning that attackers are actively exploiting a critical vulnerability affecting Quest KACE Systems Management Appliance (SMA) devices, tracked as CVE-2025-32975.\n\n\ud83d\udd17 Read More", "creation_timestamp": "2026-07-22T05:00:04.088944Z"}, {"uuid": "3231b9a2-808c-4c3b-881b-c9c7c1e1195e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-32975", "type": "exploited", "source": "https://t.me/pphm_HackerNews/1333", "content": "Unsecured Management Infrastructure Creates Expanding Enterprise Exposure\n\nCybersecurity researchers are warning that attackers are actively exploiting a critical vulnerability affecting Quest KACE Systems Management Appliance (SMA) devices, tracked as CVE-2025-32975.\n\n\ud83d\udd17 Read More", "creation_timestamp": "2026-07-23T00:00:26.940107Z"}, {"uuid": "079116fd-8e42-4d2f-bb4c-c284da4f70a2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-32975", "type": "seen", "source": "https://t.me/CyberDispatch/1348", "content": "CISA Adds 8 Actively Exploited Vulnerabilities to KEV Catalog\n\nThe U.S. Cybersecurity and Infrastructure Security Agency (CISA) urgently added eight zero-day vulnerabilities to its Known Exploited Vulnerabilities (KEV) catalog on April 20, 2026, confirming active exploitation across enterprise tools from Cisco, Quest, PaperCut, TeamCity, Kentico, and Zimbra.\n\nKey flaws include three Cisco SD-WAN vulnerabilities\u2014CVE-2026-20127 (authentication bypass), CVE-2022-20775 (privilege escalation), and CVE-2026-20133 (sensitive info exposure)\u2014plus CVE-2025-32975 (CVSS 10.0) in Quest KACE SMA, enabling full user impersonation without credentials.\n\nOthers: CVE-2023-27351 (PaperCut improper auth, CVSS 8.2); CVE-2024-27199 (TeamCity path traversal, CVSS 7.3); CVE-2025-2749 (Kentico path traversal, CVSS 7.2).", "creation_timestamp": "2026-08-30T00:00:42.872914Z"}, {"uuid": "f64566d2-b48f-492f-aa54-b637f5575748", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-32975", "type": "seen", "source": "https://t.me/CyberDispatch/1348", "content": "CISA Adds 8 Actively Exploited Vulnerabilities to KEV Catalog\n\nThe U.S. Cybersecurity and Infrastructure Security Agency (CISA) urgently added eight zero-day vulnerabilities to its Known Exploited Vulnerabilities (KEV) catalog on April 20, 2026, confirming active exploitation across enterprise tools from Cisco, Quest, PaperCut, TeamCity, Kentico, and Zimbra.\n\nKey flaws include three Cisco SD-WAN vulnerabilities\u2014CVE-2026-20127 (authentication bypass), CVE-2022-20775 (privilege escalation), and CVE-2026-20133 (sensitive info exposure)\u2014plus CVE-2025-32975 (CVSS 10.0) in Quest KACE SMA, enabling full user impersonation without credentials.\n\nOthers: CVE-2023-27351 (PaperCut improper auth, CVSS 8.2); CVE-2024-27199 (TeamCity path traversal, CVSS 7.3); CVE-2025-2749 (Kentico path traversal, CVSS 7.2).", "creation_timestamp": "2026-08-31T00:00:27.878117Z"}, {"uuid": "ea13071e-d501-4e8d-a52d-b7d533ea399f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-32975", "type": "seen", "source": "https://t.me/HackingTeamGrupoOfficial/43619", "content": "https://unaaldia.hispasec.com/2026/03/explotacion-activa-de-cve-2025-32975-permite-tomar-el-control-de-quest-kace-sma-sin-parchear.html?utm_source=rss&utm_medium=rss&utm_campaign=explotacion-activa-de-cve-2025-32975-permite-tomar-el-control-de-quest-kace-sma-sin-parchear", "creation_timestamp": "2026-09-02T06:00:15.503406Z"}, {"uuid": "fb4d3e61-0932-4fb8-a6d8-ddb71d3d0cbf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-32975", "type": "exploited", "source": "https://t.me/HackingTeamGrupoOfficial/43619", "content": "https://unaaldia.hispasec.com/2026/03/explotacion-activa-de-cve-2025-32975-permite-tomar-el-control-de-quest-kace-sma-sin-parchear.html?utm_source=rss&utm_medium=rss&utm_campaign=explotacion-activa-de-cve-2025-32975-permite-tomar-el-control-de-quest-kace-sma-sin-parchear", "creation_timestamp": "2026-09-03T00:00:47.204887Z"}]}