CVE-2021-44031: Quest KACE Desktop Authority

Critical severity, CVSS 9.8. EPSS: 2.1% chance of exploitation in the next 30 days.

An issue was discovered in Quest KACE Desktop Authority before 11.2. /dacomponentui/profiles/profileitems/outlooksettings/Insertimage.aspx contains a vulnerability that could allow pre-authentication remote code execution. An attacker could upload a .ASP file to reside at /images/{GUID}/{filename}.

Affected products

• Quest KACE Desktop Authority: before 11.2 (fixed in 11.2)

Published 2021-12-22. Last modified 2026-06-17.