ZDI-CAN-27666 HIGH 8.8 Overdue Sep 24, 2025

Quest

A high-severity vulnerability (CVSS 8.8) has been discovered in Quest software, a vendor known for identity and access management solutions. The flaw can be exploited remotely without authentication or user interaction, potentially allowing attackers to gain complete control over confidentiality, integrity, and availability of affected systems. Security teams should monitor for this vulnerability closely after the January 22, 2026 patch deadline and prioritize updating Quest products in their environments to prevent exploitation.

Advisory Details
Researcher Discovered by: 06fe5fd2bc53027c4a3b7e395af0b850e7b8a044
Reported September 24, 2025
Deadline January 22, 2026 84d overdue
CVSS Vector AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy