https://peertube.eqver.se/videos/watch/c9db5001-b40d-4019-beb8-5880fdc09902 A DEF CON 30 talk covering three pre-authentication RCE chains in KACE Systems Management Appliance (KACE SMA), a popular MDM solution by Quest. Because an MDM manages devices across an entire organization — including executing tasks with root/system privileges — its compromise effectively means full control over the infrastructure. The talk walks through the research process in detail: from obtaining an initial shell and reversing PHP code to discovering SQL injection vulnerabilities, authentication bypasses, session logic flaws, and command injection. It demonstrates how these issues can be chained together — from an unauthenticated request to root-level code execution and mass command execution across managed endpoints. Fri, 24 Jul 2026 11:25:44 GMT https://validator.w3.org/feed/docs/rss2.html PeerTube - https://peertube.eqver.se https://peertube.eqver.se/client/assets/images/icons/icon-512x512.png https://peertube.eqver.se/videos/watch/c9db5001-b40d-4019-beb8-5880fdc09902 All rights reserved, unless otherwise specified in the terms specified at https://peertube.eqver.se/about and potential licenses granted by each content's rightholder.