https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-09T21:17:40.877315+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2026-00086 bdu:2026-00086 2026-10-09T21:17:40.880012+00:00 bdu:2026-00086 https://cve.radiocsirt.org/vuln/euvd-2026-257918 EUVD-2026-257918 2026-10-09T21:17:40.880045+00:00 EUVD-2026-257918 https://cve.radiocsirt.org/vuln/fkie_cve-2025-32976 fkie_cve-2025-32976 2026-10-09T21:17:40.880059+00:00

Quest KACE Systems Management Appliance (SMA) 13.0.x before 13.0.385, 13.1.x before 13.1.81, 13.2.x before 13.2.183, 14.0.x before 14.0.341 (Patch 5), and 14.1.x before 14.1.101 (Patch 4) contains a logic flaw in its two-factor authentication implementation that allows authenticated users to bypass TOTP-based 2FA requirements. The vulnerability exists in the 2FA validation process and can be exploited to gain elevated access.

 https://cve.radiocsirt.org/vuln/ghsa-m359-p2w2-2pxh GHSA-m359-p2w2-2pxh 2026-10-09T21:17:40.880088+00:00

Quest KACE Systems Management Appliance (SMA) 13.0.x before 13.0.385, 13.1.x before 13.1.81, 13.2.x before 13.2.183, 14.0.x before 14.0.341 (Patch 5), and 14.1.x before 14.1.101 (Patch 4) contains a logic flaw in its two-factor authentication implementation that allows authenticated users to bypass TOTP-based 2FA requirements. The vulnerability exists in the 2FA validation process and can be exploited to gain elevated access.