Firetruck

CVE-2018-11138

KEV · Ransomware
Updated Aug 13, 2026 · PUBLISHED
View KEV entry →

Description

The '/common/download_agent_installer.php' script in the Quest KACE System Management Appliance is accessible by anonymous users and can be abused to perform remote code execution.

Full record on cve.org →

Affected packages

PackageVendor / ProductVersion rangeStatus
n/an/a / n/an/aaffected