Vulnerabilidades de Arqit
CVEs publicadas que afetam produtos de Arqit: 3 registro(s), com severidade, exploração e correções.
CVE-2026-33585
Baixa · 3.8
CWE-233 13/05/2026
Arqit SKA-Platform Improper Handling of Parameters Vulnerability
Improper management of the idle timeout parameter in the Keycloak interface of the Arqit SKA-Platform enables an attacker to impersonate an authenticated tenant user via an unexpired browser session.
This issue affects Symmetric Key Agreement Platform: before 26.03.
CVE-2026-33584
Média · 5.3
CWE-749 13/05/2026
Arqit SKA-Platform Enables Access to Debug Information
Exposed Keycloak management
service in the Arqit Symmetric Key Agreement Platform enables unauthorized access to sensitive debug
information such as metrics and
health data. This issue affects Symmetric Key Agreement Platform: before 26.03.
CVE-2026-33583
Alta · 8.7
CWE-749 13/05/2026
Arqit SKA-Platform Vulnerable to Key Exposure
Exposure of the QKEY (used as
input into the ‘OTA-Quantum’ device registration process) and internal
system keys via an unauthenticated and unencrypted HTTP GET method in the Arqit Symmetric Key Agreement Platform.
This issue affects Symmetric Key Agreement Platform: before 26.03.