What’s Vulnerable › Vulnerabilities

CVE-2026-33584: Arqit SKA-Platform Enables Access to Debug Information

• Severity: medium (CVSS 5.3 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.3% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2026-05-13 · updated 2026-10-26
• Weakness: CWE-749

Description

Exposed Keycloak management service in the Arqit Symmetric Key Agreement Platform enables unauthorized access to sensitive debug information such as metrics and health data. This issue affects Symmetric Key Agreement Platform: before 26.03.

Affected products

• Arqit Symmetric Key Agreement Platform: before 26.03 — fixed in 26.03

How to fix

Upgrade to a fixed version: Arqit Symmetric Key Agreement Platform 26.03. Check the vendor advisory for mitigations.

References

• https://www.cvcn.gov.it/cvcn/cve/CVE-2026-33584

Get alerted when CVE-2026-33584 or the next vulnerability affects your stack