Arqit vulnerabilities

🔔 Create alert RSS

Published CVEs affecting Arqit products: 3 record(s), with severity, exploitation and fixes.

Symmetric Key Agreement Platform 3

Exploited only (KEV) →

CVE-2026-33585 Low · 3.8 CWE-233 May 13, 2026

Arqit SKA-Platform Improper Handling of Parameters Vulnerability

Improper management of the idle timeout parameter in the Keycloak interface of the Arqit SKA-Platform enables an attacker to impersonate an authenticated tenant user via an unexpired browser session. This issue affects Symmetric Key Agreement Platform: before 26.03.

CVE-2026-33584 Medium · 5.3 CWE-749 May 13, 2026

Arqit SKA-Platform Enables Access to Debug Information

Exposed Keycloak management service in the Arqit Symmetric Key Agreement Platform enables unauthorized access to sensitive debug information such as metrics and health data. This issue affects Symmetric Key Agreement Platform: before 26.03.

CVE-2026-33583 High · 8.7 CWE-749 May 13, 2026

Arqit SKA-Platform Vulnerable to Key Exposure

Exposure of the QKEY (used as input into the ‘OTA-Quantum’ device registration process) and internal system keys via an unauthenticated and unencrypted HTTP GET method in the Arqit Symmetric Key Agreement Platform. This issue affects Symmetric Key Agreement Platform: before 26.03.