ZDI-CAN-27630 HIGH 8.8 Overdue Sep 24, 2025

Quest

Quest Software, a well-known enterprise software vendor, has a high-severity vulnerability (CVSS 8.8) that can be exploited remotely by authenticated users without user interaction, resulting in complete compromise of confidentiality, integrity, and availability. The vulnerability requires valid credentials to exploit but presents significant risk as it allows an attacker to gain full control over affected systems. Security teams should monitor for this advisory's publication and prioritize patching once Quest releases updates, particularly for any Quest products in their environment that handle critical business functions.

Advisory Details
Researcher Discovered by: 06fe5fd2bc53027c4a3b7e395af0b850e7b8a044
Reported September 24, 2025
Deadline January 22, 2026 84d overdue
CVSS Vector AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy