A critical vulnerability, CVE-2025-32975, with a CVSS score of 10.0, is being exploited by hackers to compromise unpatched Quest KACE Systems Management Appliance (SMA) systems. The flaw allows threat actors to hijack these systems, and malicious activity has been observed in customer environments since the week of March 9, 2026. The exploitation is targeting SMA systems that are exposed to the internet and have not been patched, highlighting the need for immediate remediation. The vulnerability has a maximum severity rating, indicating a high level of risk. As a result, organizations using Quest KACE SMA systems should prioritize patching and monitoring their systems for signs of exploitation1. This vulnerability expansion increases the active attack surface, making it essential for practitioners to assess their exposure and take proactive measures to prevent potential breaches.