Read the docs

Arqit

Records3All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high1CVSS 7.0–8.9

Exploited now

Arqit records in CISA KEV

No Arqit vulnerabilities are listed in CISA KEV.

Records

3 records

TI-2026-25966 CVE-2026-33583 · GHSA-p8mh-jv2c-p65g

Arqit SKA-Platform Vulnerable to Key Exposure

Priority LOW 39

Exposure of the QKEY (used as input into the ‘OTA-Quantum’ device registration process) and internal system keys via an unauthenticated and unencrypted HTTP GET method in the Arqit Symmetric Key Agreement Platform.

CVSS 3.1HIGH 8.7 Network No auth No interaction EPSS 0.00208 Published 2026-05-13 Fixed in 26.03 CWE-749
TI-2026-25967 CVE-2026-33584 · GHSA-7rhj-w7pg-37v4

Arqit SKA-Platform Enables Access to Debug Information

Priority LOW 30

Exposed Keycloak management service in the Arqit Symmetric Key Agreement Platform enables unauthorized access to sensitive debug information such as metrics and health data.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00305 Published 2026-05-13 Fixed in 26.03 CWE-749
TI-2026-25968 CVE-2026-33585 · GHSA-3878-8q4v-56w7

Arqit SKA-Platform Improper Handling of Parameters Vulnerability

Priority LOW 17

Improper management of the idle timeout parameter in the Keycloak interface of the Arqit SKA-Platform enables an attacker to impersonate an authenticated tenant user via an unexpired browser session.

CVSS 3.1LOW 3.8 Physical No auth User interaction EPSS 0.00134 Published 2026-05-13 Fixed in 26.03 CWE-233
Open these records in search →