CVE-2025-32975 exploited since March 2026 on unpatched KACE SMA systems, enabling admin takeover and payload delivery.
Poke spawns Baldi from Baldi’s Basics using admin commands.