Critical severity9.8NVD Advisory· Published Jul 27, 2026· Updated Aug 3, 2026

CVE-2021-32088

Description

An issue was discovered in Quest KACE Systems Deployment Appliance (SMA) 11.0.273. Certain API endpoints contain a rate-limiting feature to minimize a brute-force attack. This protection can be bypassed by removing the kboxid cookie.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Quest/Kace Systems Management Appliance
cpe:2.3:a:quest:kace_systems_management_appliance:11.0.273:*:*:*:*:*:*:*
Quest/Kace Systems Deployment Appliancellm-fuzzy
Range: = 11.0.273

Patches

Vulnerability mechanics

References

support.quest.com/kace-systems-management-appliance/kb/4293505/quest-response-to-criticalstart-vulnerability-reportnvdVendor Advisory
support.quest.com/download-product-selectnvdProduct

News mentions

No linked articles in our index yet.

cvss	0.637
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000