https://cvebrief.com/archive/cves/vendor/quest/ High and critical Quest vulnerabilities covered by CVE Brief, with independent analyst commentary. en-us Tue, 04 Aug 2026 12:00:00 GMT https://cvebrief.com/cve/cve-2021-32084/?utm_source=cvebrief&utm_medium=rss&utm_campaign=vendor-feed cvebrief-quest-CVE-2021-32084 Tue, 04 Aug 2026 12:00:00 GMT Quest KACE SMA 11.0.273 fails to enforce IP-based access restrictions on API endpoints, allowing bypass of console security. Independent analyst report on CVE Brief. https://cvebrief.com/cve/cve-2021-32085/?utm_source=cvebrief&utm_medium=rss&utm_campaign=vendor-feed cvebrief-quest-CVE-2021-32085 Tue, 04 Aug 2026 12:00:00 GMT An issue was discovered in Quest KACE Systems Deployment Appliance (SMA) 11.0.273. Independent analyst report on CVE Brief. https://cvebrief.com/cve/cve-2021-32086/?utm_source=cvebrief&utm_medium=rss&utm_campaign=vendor-feed cvebrief-quest-CVE-2021-32086 Tue, 04 Aug 2026 12:00:00 GMT Quest KACE Systems Deployment Appliance uses a hardcoded symmetric encryption key to protect secrets in MySQL databases, allowing unauthorized decryption by attackers with access to database backups. Independent analyst report on CVE Brief. https://cvebrief.com/cve/cve-2026-7569/?utm_source=cvebrief&utm_medium=rss&utm_campaign=vendor-feed cvebrief-quest-CVE-2026-7569 Thu, 25 Jun 2026 12:00:00 GMT Quest NetVault Backup viewclient Cross-Site Scripting Authentication Bypass Vulnerability Independent analyst report on CVE Brief. https://cvebrief.com/cve/cve-2026-7570/?utm_source=cvebrief&utm_medium=rss&utm_campaign=vendor-feed cvebrief-quest-CVE-2026-7570 Thu, 25 Jun 2026 12:00:00 GMT Quest NetVault Backup NVBUDashboard SQL Injection Remote Code Execution Vulnerability Independent analyst report on CVE Brief. https://cvebrief.com/cve/cve-2026-9780/?utm_source=cvebrief&utm_medium=rss&utm_campaign=vendor-feed cvebrief-quest-CVE-2026-9780 Thu, 25 Jun 2026 12:00:00 GMT Quest NetVault Backup addclient3 Cross-Site Scripting Authentication Bypass Vulnerability Independent analyst report on CVE Brief. https://cvebrief.com/cve/cve-2026-9781/?utm_source=cvebrief&utm_medium=rss&utm_campaign=vendor-feed cvebrief-quest-CVE-2026-9781 Thu, 25 Jun 2026 12:00:00 GMT Quest NetVault Backup NVBURASDevice SQL Injection Remote Code Execution Vulnerability Independent analyst report on CVE Brief. https://cvebrief.com/cve/cve-2026-9782/?utm_source=cvebrief&utm_medium=rss&utm_campaign=vendor-feed cvebrief-quest-CVE-2026-9782 Thu, 25 Jun 2026 12:00:00 GMT Quest NetVault Backup NVBUDeviceDrive SQL Injection Remote Code Execution Vulnerability Independent analyst report on CVE Brief. https://cvebrief.com/cve/cve-2026-9783/?utm_source=cvebrief&utm_medium=rss&utm_campaign=vendor-feed cvebrief-quest-CVE-2026-9783 Thu, 25 Jun 2026 12:00:00 GMT Quest NetVault Backup NVBURemovableMedia SQL Injection Remote Code Execution Vulnerability Independent analyst report on CVE Brief. https://cvebrief.com/cve/cve-2026-9784/?utm_source=cvebrief&utm_medium=rss&utm_campaign=vendor-feed cvebrief-quest-CVE-2026-9784 Thu, 25 Jun 2026 12:00:00 GMT Quest NetVault Backup NVBULibraryPort SQL Injection Remote Code Execution Vulnerability Independent analyst report on CVE Brief. https://cvebrief.com/cve/cve-2026-9785/?utm_source=cvebrief&utm_medium=rss&utm_campaign=vendor-feed cvebrief-quest-CVE-2026-9785 Thu, 25 Jun 2026 12:00:00 GMT Quest NetVault Backup NVBULibrarySlot SQL Injection Remote Code Execution Vulnerability Independent analyst report on CVE Brief. https://cvebrief.com/cve/cve-2026-9786/?utm_source=cvebrief&utm_medium=rss&utm_campaign=vendor-feed cvebrief-quest-CVE-2026-9786 Thu, 25 Jun 2026 12:00:00 GMT Quest NetVault Backup NVBUDashboard SQL Injection Remote Code Execution Vulnerability Independent analyst report on CVE Brief. https://cvebrief.com/cve/cve-2026-9787/?utm_source=cvebrief&utm_medium=rss&utm_campaign=vendor-feed cvebrief-quest-CVE-2026-9787 Thu, 25 Jun 2026 12:00:00 GMT Quest NetVault Backup NVBULogDaemon Command Injection Remote Code Execution Vulnerability Independent analyst report on CVE Brief. https://cvebrief.com/cve/cve-2025-32975/?utm_source=cvebrief&utm_medium=rss&utm_campaign=vendor-feed cvebrief-quest-CVE-2025-32975 Tue, 21 Apr 2026 12:00:00 GMT Quest KACE Systems Management Appliance (SMA) Improper Authentication Vulnerability - Active in CISA KEV catalog. Independent analyst report on CVE Brief. https://cvebrief.com/archive/2025/07/05/?utm_source=cvebrief&utm_medium=rss&utm_campaign=vendor-feed cvebrief-quest-CVE-2025-26850 Sat, 05 Jul 2025 12:00:00 GMT The agent in Quest KACE Systems Management Appliance (SMA) before 14.0.97 and 14.1.x before 14.1.19 potentially allows privilege escalation on managed systems. Fix documented: 14.0.97 (CVE record).