Quest CVEs

15 high and critical vulnerabilities covered by CVE Brief since 2025-07-05, each with independent analyst commentary.

← All vendors RSS feed Watch this vendor
15 Total CVEs
14 AI Analyzed
1 CISA KEV
4 Critical

Profile

6.7% ended up actively exploited 1 of 15 added to CISA KEV
27% rated critical (CVSS 9.0+) 4 critical, 11 high
0 with a public exploit on record positive-only index; absence is not proof

Last 12 months

14 CVEs in the last 12 months

Products

  • NetVault Backup10
  • KACE Systems Deployment Appliance (SMA)3
  • KACE Systems Management Appliance (SMA)1
  • KACE Systems Management Appliance1

4 products in total

Every figure counts the high and critical CVEs CVE Brief has published for this vendor, not every CVE the vendor has ever received. Exploitation means listing in the CISA Known Exploited Vulnerabilities catalog. No patch-availability figure is shown because CVE Brief does not measure it.

All Vendors
Showing 1-15 of 15 CVEs
CVE-2026-9787
Analyzed
8.8
Quest NetVault Backup

Quest NetVault Backup NVBULogDaemon Command Injection Remote Code Execution Vulnerability

2026-06-25
Full analysis →
CVE-2026-9786
Analyzed
8.8
Quest NetVault Backup

Quest NetVault Backup NVBUDashboard SQL Injection Remote Code Execution Vulnerability

2026-06-25
Full analysis →
CVE-2026-9785
Analyzed
8.8
Quest NetVault Backup

Quest NetVault Backup NVBULibrarySlot SQL Injection Remote Code Execution Vulnerability

2026-06-25
Full analysis →
CVE-2026-9784
Analyzed
8.8
Quest NetVault Backup

Quest NetVault Backup NVBULibraryPort SQL Injection Remote Code Execution Vulnerability

2026-06-25
Full analysis →
CVE-2026-9783
Analyzed
8.8
Quest NetVault Backup

Quest NetVault Backup NVBURemovableMedia SQL Injection Remote Code Execution Vulnerability

2026-06-25
Full analysis →
CVE-2026-9782
Analyzed
8.8
Quest NetVault Backup

Quest NetVault Backup NVBUDeviceDrive SQL Injection Remote Code Execution Vulnerability

2026-06-25
Full analysis →
CVE-2026-9781
Analyzed
8.8
Quest NetVault Backup

Quest NetVault Backup NVBURASDevice SQL Injection Remote Code Execution Vulnerability

2026-06-25
Full analysis →
CVE-2026-9780
Analyzed
8.8
Quest NetVault Backup

Quest NetVault Backup addclient3 Cross-Site Scripting Authentication Bypass Vulnerability

2026-06-25
Full analysis →
CVE-2026-7570
Analyzed
8.8
Quest NetVault Backup

Quest NetVault Backup NVBUDashboard SQL Injection Remote Code Execution Vulnerability

2026-06-25
Full analysis →
CVE-2026-7569
Analyzed
8.8
Quest NetVault Backup

Quest NetVault Backup viewclient Cross-Site Scripting Authentication Bypass Vulnerability

2026-06-25
Full analysis →
CVE-2025-32975
KEV Analyzed
9.5
Quest KACE Systems Management Appliance (SMA)

Quest KACE Systems Management Appliance (SMA) Improper Authentication Vulnerability - Active in CISA KEV catalog.

2026-04-21
Full analysis →
CVE-2025-26850
9.3
Quest KACE Systems Management Appliance

The agent in Quest KACE Systems Management Appliance (SMA) before 14.0.97 and 14.1.x before 14.1.19 potentially allows privilege escalation on managed...

2025-07-05
In the July 6, 2025 brief →
CVE-2021-32086
Analyzed
9.8
Quest KACE Systems Deployment Appliance (SMA)

Quest KACE Systems Deployment Appliance uses a hardcoded symmetric encryption key to protect secrets in MySQL databases, allowing unauthorized decrypt...

2026-08-04
Full analysis →
CVE-2021-32085
Analyzed
8.8
Quest KACE Systems Deployment Appliance (SMA)

An issue was discovered in Quest KACE Systems Deployment Appliance (SMA) 11.0.273. It installs with default user credentials. The report and R1 MySQL...

2026-08-04
Full analysis →
CVE-2021-32084
Analyzed
9.8
Quest KACE Systems Deployment Appliance (SMA)

Quest KACE SMA 11.0.273 fails to enforce IP-based access restrictions on API endpoints, allowing bypass of console security.

2026-08-04
Full analysis →