Press

Galactic Advisors and Kaseya Collaborate to Address Critical Vulnerabilities in Network Detective

Written by Galactic Advisors | Jul 10, 2025, 12:00:00 PM

The announcement

San Diego, CA and Miami, FL, In a strong example of responsible disclosure and industry collaboration, Galactic Advisors, a cybersecurity firm specializing in managed service provider (MSP) defense, worked closely with Kaseya to identify and resolve two vulnerabilities in Kaseya's Network Detective tool.

The issues, now publicly listed in the MITRE CVE database, were discovered during routine research by Galactic Advisors' security team and promptly reported to Kaseya:

  • CVE-2025-32353, Passwords in Cleartext: Network Detective stored sensitive credentials, including those for privileged and administrative accounts, in unprotected plaintext files on local machines. These files could have been accessible to an attacker with access to the system.
  • CVE-2025-32874, Reversible Encryption: The tool used a predictable, static encryption method for storing credentials, allowing attackers to decrypt and expose sensitive data.

Kaseya acted swiftly upon notification, validating the findings and deploying security updates. Galactic Advisors and Kaseya coordinated throughout the remediation process to ensure user protections were in place prior to public disclosure.

Statements

At Galactic, our mission is to help MSPs avoid cyber liability. This means holding the tools they rely on to the highest security standards. We're proud of our team's diligence and of Kaseya's willingness to engage transparently and take immediate action.

Bruce McCully, CEO of Galactic Advisors

We appreciate Galactic Advisors for identifying these issues and supporting our remediation efforts. This kind of partnership improves the entire MSP ecosystem.

Jim Lippie, Chief Product Officer of Kaseya

Full CVE details

  • https://www.cve.org/CVERecord?id=CVE-2025-32353
  • https://www.cve.org/CVERecord?id=CVE-2025-32874

About Galactic Advisors: Galactic Advisors is a cybersecurity firm dedicated to reducing liability for MSPs through security research, proactive assessments, and incident response.

  • https://galacticadvisors.com

About Kaseya: Kaseya is the leading global provider of AI-powered IT management and cybersecurity software.

  • https://www.kaseya.com

Media contacts

  • Galactic Advisors: press@galacticadvisors.com
  • Kaseya: PR@kaseya.com

Media contact

Galactic Advisors Press
press@galacticadvisors.com