Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

3 records

Vendor: Arqit Clear all filters
TI-2026-25968 CVE-2026-33585 · GHSA-3878-8q4v-56w7

Arqit SKA-Platform Improper Handling of Parameters Vulnerability

Priority LOW 17

Improper management of the idle timeout parameter in the Keycloak interface of the Arqit SKA-Platform enables an attacker to impersonate an authenticated tenant user via an unexpired browser session.

CVSS 3.1LOW 3.8 Physical No auth User interaction EPSS 0.00134 Published 2026-05-13 Fixed in 26.03 CWE-233
TI-2026-25967 CVE-2026-33584 · GHSA-7rhj-w7pg-37v4

Arqit SKA-Platform Enables Access to Debug Information

Priority LOW 30

Exposed Keycloak management service in the Arqit Symmetric Key Agreement Platform enables unauthorized access to sensitive debug information such as metrics and health data.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00305 Published 2026-05-13 Fixed in 26.03 CWE-749
TI-2026-25966 CVE-2026-33583 · GHSA-p8mh-jv2c-p65g

Arqit SKA-Platform Vulnerable to Key Exposure

Priority LOW 39

Exposure of the QKEY (used as input into the ‘OTA-Quantum’ device registration process) and internal system keys via an unauthenticated and unencrypted HTTP GET method in the Arqit Symmetric Key Agreement Platform.

CVSS 3.1HIGH 8.7 Network No auth No interaction EPSS 0.00208 Published 2026-05-13 Fixed in 26.03 CWE-749