cybercrime.clubhttps://cybercrime.club/tags/cve-2025-32975/Infrastructure security news for people who build infrastructure.Hugo -- gohugo.ioen-usTue, 21 Apr 2026 19:08:38 -0400Quest KACE SMA CVE-2025-32975: CVSS 10.0 SSO Auth Bypass Added to CISA KEV as Admin Takeover Campaign Continueshttps://cybercrime.club/posts/quest-kace-sma-cve-2025-32975-sso-auth-bypass-cisa-kev/Tue, 21 Apr 2026 19:08:38 -0400https://cybercrime.club/posts/quest-kace-sma-cve-2025-32975-sso-auth-bypass-cisa-kev/CISA added CVE-2025-32975 — a CVSS 10.0 SSO authentication bypass in Quest KACE Systems Management Appliance — to the KEV catalog on April 20, 2026. Federal agencies must patch by May 4. Exploitation has been in progress since March.vulnerabilities