← All CVEs
CVE-2021-32087
UnratedPublished 2026-07-27
CVSS
—
EPSS
—
Exploited
No
Summary
An issue was discovered in Quest KACE Systems Deployment Appliance (SMA) 11.0.273. It installs with default user credentials. The kbftp account has a password of getbxf, which is publicly known and documented. This allows remote attackers to trivially gain privileged access to the FTP service interface, which contains MySQL backups. Sensitive information is stored in the database, such as privileged credentials for other systems.
References
- https://support.quest.com/download-product-select
- https://support.quest.com/kace-systems-management-appliance/kb/4293505/quest-response-to-criticalstart-vulnerability-report
Is your stack affected?
Pentevo's AI pentest continuously checks your systems against known vulnerabilities like this one.
Recent CVEs
- CVE-2026-65441Unauthenticated Cross Site Scripting (XSS) in GiveWP <= 4.16.3 versions.7.1
- CVE-2026-65442Unauthenticated Server Side Request Forgery (SSRF) in FormCraft <= 3.9.15 versions.7.2
- CVE-2026-65443Unauthenticated Cross Site Scripting (XSS) in BackWPup <= 5.7.4 versions.7.1
- CVE-2026-65445Unauthenticated Broken Access Control in Ad Invalid Click Protector (AICP) <= 1.3.0 versions.6.5
- CVE-2026-65446Unauthenticated Cross Site Scripting (XSS) in Kali Forms <= 2.4.18 versions.7.1
- CVE-2026-65447Unauthenticated Cross Site Scripting (XSS) in Contest Gallery <= 30.0.6 versions.7.1