← Back to browse · API

CVE-2018-11138

Severity
CRITICAL
CVSS
9.8
EPSS
0.91778
Risk score
57.12
CISA KEV
Yes
PoC
No
Published
2018-05-31
Modified
2025-10-21
First seen
2026-08-07
Aliases
EUVD-2018-3180, GHSA-8M62-73PQ-X847
Products
Quest:KACE System Management Appliance, n/a:n/a n/a
Sources
cisa.gov CVE-2018-11138
euvd EUVD-2018-3180

Description

The '/common/download_agent_installer.php' script in the Quest KACE System Management Appliance 8.0.318 is accessible by anonymous users and can be abused to execute arbitrary commands on the system.

References