CVE-2026-33584
Arqit SKA-Platform Enables Access to Debug Information
- State
- Published
- Severity
- 5.3 Medium
- Published
- May 13, 2026
- Updated
- May 13, 2026
- Reserved
- Mar 23, 2026
Description
Exposed Keycloak management service in the Arqit Symmetric Key Agreement Platform enables unauthorized access to sensitive debug information such as metrics and health data. This issue affects Symmetric Key Agreement Platform: before 26.03.
Scores
| CVSS | Score | Vector | Source |
|---|---|---|---|
| 3.1 | 5.3 Medium | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N | ENISA |
Weaknesses
- CWE-749 Exposed dangerous method or function
Affected Products
| Product | Versions |
|---|---|
Symmetric Key Agreement PlatformArqit |
|
References
- https://www.cvcn.gov.it/cvcn/cve/CVE-2026-33584third-party-advisory
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.