6049 matches found
CVE-2026-33585 Arqit SKA-Platform Improper Handling of Parameters Vulnerability
Improper management of the idle timeout parameter in the Keycloak interface of the Arqit SKA-Platform enables an attacker to impersonate an authenticated tenant user via an unexpired browser session. This issue affects Symmetric Key Agreement Platform: before 26.03...
CVE-2026-33584 Arqit SKA-Platform Enables Access to Debug Information
Exposed Keycloak management service in the Arqit Symmetric Key Agreement Platform enables unauthorized access to sensitive debug information such as metrics and health data. This issue affects Symmetric Key Agreement Platform: before 26.03...
CVE-2026-33584 Arqit SKA-Platform Enables Access to Debug Information
Exposed Keycloak management service in the Arqit Symmetric Key Agreement Platform enables unauthorized access to sensitive debug information such as metrics and health data. This issue affects Symmetric Key Agreement Platform: before 26.03...
CVE-2026-33584
Exposed Keycloak management service in the Arqit Symmetric Key Agreement Platform enables unauthorized access to sensitive debug information such as metrics and health data. This issue affects Symmetric Key Agreement Platform: before 26.03...
CVE-2026-33584
Summary: CVE-2026-33584 affects the Arqit Symmetric Key Agreement Platform, where the Keycloak management service is exposed, allowing unauthorized access to sensitive debug information (metrics and health data) for versions before 26.03. The CVSS 3.1 base score is 5.3 (MEDIUM) with network attac...
Arqit Symmetric Key Agreement Platform 安全漏洞
The Arqit Symmetric Key Agreement Platform is a quantum-safe key negotiation platform developed by Arqit Corporation. Versions prior to 26.03 of the Arqit Symmetric Key Agreement Platform contained security vulnerabilities. These vulnerabilities stemmed from exposing the Keycloak management...
PT-2026-40776
Improper management of the idle timeout parameter in the Keycloak interface of the Arqit SKA-Platform enables an attacker to impersonate an authenticated tenant user via an unexpired browser session. This issue affects Symmetric Key Agreement Platform: before 26.03...
CVE-2026-33585: Improper Handling of Parameters
Improper management of the idle timeout parameter in the Keycloak interface of the Arqit SKA-Platform enables an attacker to impersonate an authenticated tenant user via an unexpired browser session. This issue affects Symmetric Key Agreement Platform: before 26.03...
PT-2026-40775
Exposed Keycloak management service in the Arqit Symmetric Key Agreement Platform enables unauthorized access to sensitive debug information such as metrics and health data. This issue affects Symmetric Key Agreement Platform: before 26.03...
CVE-2026-33584: Exposed Dangerous Method or Function
Exposed Keycloak management service in the Arqit Symmetric Key Agreement Platform enables unauthorized access to sensitive debug information such as metrics and health data. This issue affects Symmetric Key Agreement Platform: before 26.03...
Arqit Symmetric Key Agreement Platform 安全漏洞
The Arqit Symmetric Key Agreement Platform is a quantum-safe key negotiation platform developed by Arqit Corporation. Versions prior to 26.03 of the Arqit Symmetric Key Agreement Platform contained security vulnerabilities. These vulnerabilities stemmed from improper management of the idle timeou...
GHSA-WWPQ-F5C3-7HVX vulnerabilities
Vulnerabilities for packages: zipkin, apache-nifi-registry, keycloak-config-cli, thingsboard...
CVE-2026-40973 vulnerabilities
Vulnerabilities for packages: zipkin, apache-nifi-registry, keycloak-config-cli, thingsboard...
CVE-2026-40973 vulnerabilities
Vulnerabilities for packages: conductor, nacos, kafbat-ui, conductor-fips, keycloak-config-cli, apache-nifi-registry, nacos-docker, zipkin, thingsboard, camunda-zeebe, kafbat-ui-fips...
GHSA-WWPQ-F5C3-7HVX vulnerabilities
Vulnerabilities for packages: conductor, nacos, kafbat-ui, conductor-fips, keycloak-config-cli, apache-nifi-registry, nacos-docker, zipkin, thingsboard, camunda-zeebe, kafbat-ui-fips...
GHSA-HM32-HFMW-RHVG vulnerabilities
Vulnerabilities for packages: keycloak...
CVE-2026-7500 vulnerabilities
Vulnerabilities for packages: keycloak...
GHSA-MJ4R-2HFC-F8P6 vulnerabilities
Vulnerabilities for packages: apache-activemq-artemis, akhq, zookeeper, apache-nifi, neo4j, cassandra, kserve-modelmesh, flyway, infinispan, sonarqube, opensearch, selenium, docker-selenium, management-api-for-apache-cassandra-5.0, tez, wavefront-proxy, apache-nifi-registry, druid, spark,...
CVE-2026-42583 vulnerabilities
Vulnerabilities for packages: apache-activemq-artemis, akhq, zookeeper, apache-nifi, neo4j, cassandra, kserve-modelmesh, flyway, infinispan, sonarqube, opensearch, selenium, docker-selenium, management-api-for-apache-cassandra-5.0, tez, wavefront-proxy, apache-nifi-registry, druid, spark,...
CVE-2026-42580 vulnerabilities
Vulnerabilities for packages: apache-activemq-artemis, akhq, apache-nifi, neo4j, kserve-modelmesh, flyway, infinispan, sonarqube, opensearch, selenium, docker-selenium, management-api-for-apache-cassandra-5.0, tez, wavefront-proxy, apache-nifi-registry, druid, spark, thingsboard, apicurio-registr...