Critical severity9.8CISA KEVNVD Advisory· Published May 31, 2018· Updated Jun 17, 2026
CVE-2018-11138
CVE-2018-11138
Description
The '/common/download_agent_installer.php' script in the Quest KACE System Management Appliance 8.0.318 is accessible by anonymous users and can be abused to execute arbitrary commands on the system.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
1- Range: =8.0.318
Patches
Vulnerability mechanics
References
3- www.coresecurity.com/advisories/quest-kace-system-management-appliance-multiple-vulnerabilitiesnvdExploitTechnical DescriptionThird Party Advisory
- www.exploit-db.com/exploits/44950/nvdExploitThird Party AdvisoryVDB Entry
- www.cisa.gov/known-exploited-vulnerabilities-catalognvdUS Government Resource
News mentions
0No linked articles in our index yet.