ZDI-CAN-27666
HIGH 8.8
Overdue
Sep 24, 2025
Quest
A high-severity vulnerability (CVSS 8.8) has been discovered in Quest software, a vendor known for identity and access management solutions. The flaw can be exploited remotely without authentication or user interaction, potentially allowing attackers to gain complete control over confidentiality, integrity, and availability of affected systems. Security teams should monitor for this vulnerability closely after the January 22, 2026 patch deadline and prioritize updating Quest products in their environments to prevent exploitation.
Advisory Details
Researcher
Discovered by:
06fe5fd2bc53027c4a3b7e395af0b850e7b8a044
Reported
September 24, 2025
Deadline
January 22, 2026
84d overdue
CVSS Vector
AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H