CVE-2026-33584

Summary: CVE-2026-33584 affects the Arqit Symmetric Key Agreement Platform, where the Keycloak management service is exposed, allowing unauthorized access to sensitive debug information (metrics and health data) for versions before 26.03. The CVSS 3.1 base score is 5.3 (MEDIUM) with network attac...

CVE-2026-33584

Exposed Keycloak management service in the Arqit Symmetric Key Agreement Platform enables unauthorized access to sensitive debug information such as metrics and health data. This issue affects Symmetric Key Agreement Platform: before 26.03...

CVE-2026-33584 Arqit SKA-Platform Enables Access to Debug Information

Exposed Keycloak management service in the Arqit Symmetric Key Agreement Platform enables unauthorized access to sensitive debug information such as metrics and health data. This issue affects Symmetric Key Agreement Platform: before 26.03...

Arqit Symmetric Key Agreement Platform 安全漏洞

The Arqit Symmetric Key Agreement Platform is a quantum-safe key negotiation platform developed by Arqit Corporation. Versions prior to 26.03 of the Arqit Symmetric Key Agreement Platform contained security vulnerabilities. These vulnerabilities stemmed from exposing the Keycloak management...

PT-2026-40775

Exposed Keycloak management service in the Arqit Symmetric Key Agreement Platform enables unauthorized access to sensitive debug information such as metrics and health data. This issue affects Symmetric Key Agreement Platform: before 26.03...

Arqit Symmetric Key Agreement Platform 安全漏洞

The Arqit Symmetric Key Agreement Platform is a quantum-safe key negotiation platform developed by Arqit Corporation. Versions prior to 26.03 of the Arqit Symmetric Key Agreement Platform contained security vulnerabilities. These vulnerabilities stemmed from improper management of the idle timeou...

PT-2026-40776

Improper management of the idle timeout parameter in the Keycloak interface of the Arqit SKA-Platform enables an attacker to impersonate an authenticated tenant user via an unexpired browser session. This issue affects Symmetric Key Agreement Platform: before 26.03...

GHSA-WWPQ-F5C3-7HVX vulnerabilities

Vulnerabilities for packages: thingsboard, zipkin, apache-nifi-registry, keycloak-config-cli...

CVE-2026-40973 vulnerabilities

Vulnerabilities for packages: thingsboard, zipkin, apache-nifi-registry, keycloak-config-cli...

CVE-2026-40973 vulnerabilities

Vulnerabilities for packages: nacos, kafbat-ui, conductor-fips, kafbat-ui-fips, zipkin, thingsboard, nacos-docker, conductor, camunda-zeebe, keycloak-config-cli, apache-nifi-registry...

GHSA-WWPQ-F5C3-7HVX vulnerabilities

Vulnerabilities for packages: nacos, kafbat-ui, conductor-fips, kafbat-ui-fips, zipkin, thingsboard, nacos-docker, conductor, camunda-zeebe, keycloak-config-cli, apache-nifi-registry...

CVE-2026-7500 vulnerabilities

Vulnerabilities for packages: keycloak...

GHSA-HM32-HFMW-RHVG vulnerabilities

Vulnerabilities for packages: keycloak...

CVE-2026-42583 vulnerabilities

Vulnerabilities for packages: apicurio-registry, flyway, kserve-modelmesh, zookeeper, cassandra, thingsboard, wildfly, tez, trino, druid, spark, strimzi-kafka-operator, apache-nifi-registry, management-api-for-apache-cassandra-5.0, wavefront-proxy, apache-pulsar, apache-nifi, docker-selenium,...

GHSA-MJ4R-2HFC-F8P6 vulnerabilities

Vulnerabilities for packages: apicurio-registry, flyway, kserve-modelmesh, zookeeper, cassandra, thingsboard, wildfly, tez, trino, druid, spark, strimzi-kafka-operator, apache-nifi-registry, management-api-for-apache-cassandra-5.0, wavefront-proxy, apache-pulsar, apache-nifi, docker-selenium,...

GHSA-57RV-R2G8-2CJ3 vulnerabilities

Vulnerabilities for packages: apicurio-registry, flyway, kserve-modelmesh, thingsboard, tez, trino, druid, spark, strimzi-kafka-operator, apache-nifi-registry, management-api-for-apache-cassandra-5.0, wavefront-proxy, apache-pulsar, apache-nifi, docker-selenium, apache-activemq-artemis, logstash,...

GHSA-M4CV-J2PX-7723 vulnerabilities

Vulnerabilities for packages: apicurio-registry, flyway, kserve-modelmesh, thingsboard, tez, trino, druid, spark, strimzi-kafka-operator, apache-nifi-registry, management-api-for-apache-cassandra-5.0, wavefront-proxy, apache-pulsar, apache-nifi, docker-selenium, apache-activemq-artemis, logstash,...

GHSA-XXQH-MFJM-7MV9 vulnerabilities

Vulnerabilities for packages: apicurio-registry, flyway, kserve-modelmesh, thingsboard, tez, trino, druid, spark, strimzi-kafka-operator, apache-nifi-registry, management-api-for-apache-cassandra-5.0, wavefront-proxy, apache-pulsar, apache-nifi, docker-selenium, apache-activemq-artemis, logstash,...

CVE-2026-42580 vulnerabilities

Vulnerabilities for packages: apicurio-registry, flyway, kserve-modelmesh, thingsboard, tez, trino, druid, spark, strimzi-kafka-operator, apache-nifi-registry, management-api-for-apache-cassandra-5.0, wavefront-proxy, apache-pulsar, apache-nifi, docker-selenium, apache-activemq-artemis, logstash,...

GHSA-38F8-5428-X5CV vulnerabilities

Vulnerabilities for packages: apicurio-registry, flyway, kserve-modelmesh, thingsboard, tez, trino, druid, spark, strimzi-kafka-operator, apache-nifi-registry, management-api-for-apache-cassandra-5.0, wavefront-proxy, apache-pulsar, apache-nifi, docker-selenium, apache-activemq-artemis, logstash,...