PT-2026-40775

Exposed Keycloak management service in the Arqit Symmetric Key Agreement Platform enables unauthorized access to sensitive debug information such as metrics and health data. This issue affects Symmetric Key Agreement Platform: before 26.03...

PT-2026-40776

Improper management of the idle timeout parameter in the Keycloak interface of the Arqit SKA-Platform enables an attacker to impersonate an authenticated tenant user via an unexpired browser session. This issue affects Symmetric Key Agreement Platform: before 26.03...

CVE-2026-40973 vulnerabilities

Vulnerabilities for packages: zipkin, thingsboard, keycloak-config-cli, apache-nifi-registry...

GHSA-WWPQ-F5C3-7HVX vulnerabilities

Vulnerabilities for packages: zipkin, thingsboard, keycloak-config-cli, apache-nifi-registry...

GHSA-WWPQ-F5C3-7HVX vulnerabilities

Vulnerabilities for packages: apache-nifi-registry, kafbat-ui-fips, nacos, kafbat-ui, thingsboard, zipkin, conductor, camunda-zeebe, keycloak-config-cli, nacos-docker, conductor-fips...

CVE-2026-40973 vulnerabilities

Vulnerabilities for packages: apache-nifi-registry, kafbat-ui-fips, nacos, kafbat-ui, thingsboard, zipkin, conductor, camunda-zeebe, keycloak-config-cli, nacos-docker, conductor-fips...

CVE-2026-7500 vulnerabilities

Vulnerabilities for packages: keycloak...

GHSA-HM32-HFMW-RHVG vulnerabilities

Vulnerabilities for packages: keycloak...

GHSA-MJ4R-2HFC-F8P6 vulnerabilities

Vulnerabilities for packages: opensearch, strimzi-kafka-operator, wavefront-proxy, akhq, infinispan, keycloak, sonarqube, management-api-for-apache-cassandra-5.0, kserve-modelmesh, docker-selenium, zookeeper, logstash, trino, neo4j, selenium, druid, zipkin, flyway, apache-pulsar, apache-nifi,...

CVE-2026-42583 vulnerabilities

Vulnerabilities for packages: opensearch, strimzi-kafka-operator, wavefront-proxy, akhq, infinispan, keycloak, sonarqube, management-api-for-apache-cassandra-5.0, kserve-modelmesh, docker-selenium, zookeeper, logstash, trino, neo4j, selenium, druid, zipkin, flyway, apache-pulsar, apache-nifi,...

GHSA-57RV-R2G8-2CJ3 vulnerabilities

Vulnerabilities for packages: opensearch, strimzi-kafka-operator, wavefront-proxy, akhq, infinispan, keycloak, sonarqube, management-api-for-apache-cassandra-5.0, kserve-modelmesh, docker-selenium, logstash, trino, neo4j, selenium, druid, zipkin, flyway, apache-pulsar, apache-nifi,...

GHSA-M4CV-J2PX-7723 vulnerabilities

Vulnerabilities for packages: opensearch, strimzi-kafka-operator, wavefront-proxy, akhq, infinispan, keycloak, sonarqube, management-api-for-apache-cassandra-5.0, kserve-modelmesh, docker-selenium, logstash, trino, neo4j, selenium, druid, zipkin, flyway, apache-pulsar, apache-nifi,...

GHSA-XXQH-MFJM-7MV9 vulnerabilities

Vulnerabilities for packages: opensearch, strimzi-kafka-operator, wavefront-proxy, akhq, infinispan, keycloak, sonarqube, management-api-for-apache-cassandra-5.0, kserve-modelmesh, docker-selenium, logstash, trino, neo4j, selenium, druid, zipkin, flyway, apache-pulsar, apache-nifi,...

CVE-2026-42580 vulnerabilities

Vulnerabilities for packages: opensearch, strimzi-kafka-operator, wavefront-proxy, akhq, infinispan, keycloak, sonarqube, management-api-for-apache-cassandra-5.0, kserve-modelmesh, docker-selenium, logstash, trino, neo4j, selenium, druid, zipkin, flyway, apache-pulsar, apache-nifi,...

GHSA-38F8-5428-X5CV vulnerabilities

Vulnerabilities for packages: opensearch, strimzi-kafka-operator, wavefront-proxy, akhq, infinispan, keycloak, sonarqube, management-api-for-apache-cassandra-5.0, kserve-modelmesh, docker-selenium, logstash, trino, neo4j, selenium, druid, zipkin, flyway, apache-pulsar, apache-nifi,...

CVE-2026-42587 vulnerabilities

Vulnerabilities for packages: opensearch, strimzi-kafka-operator, wavefront-proxy, akhq, infinispan, keycloak, sonarqube, management-api-for-apache-cassandra-5.0, kserve-modelmesh, docker-selenium, logstash, trino, neo4j, selenium, druid, zipkin, flyway, apache-pulsar, apache-nifi, wildfly,...

GHSA-F6HV-JMP6-3VWV vulnerabilities

Vulnerabilities for packages: opensearch, strimzi-kafka-operator, wavefront-proxy, akhq, infinispan, keycloak, sonarqube, management-api-for-apache-cassandra-5.0, kserve-modelmesh, docker-selenium, logstash, trino, neo4j, selenium, druid, zipkin, flyway, apache-pulsar, apache-nifi, wildfly,...

CVE-2026-42585 vulnerabilities

Vulnerabilities for packages: opensearch, strimzi-kafka-operator, wavefront-proxy, akhq, infinispan, keycloak, sonarqube, management-api-for-apache-cassandra-5.0, kserve-modelmesh, docker-selenium, logstash, trino, neo4j, selenium, druid, zipkin, flyway, apache-pulsar, apache-nifi,...

CVE-2026-42581 vulnerabilities

Vulnerabilities for packages: opensearch, strimzi-kafka-operator, wavefront-proxy, akhq, infinispan, keycloak, sonarqube, management-api-for-apache-cassandra-5.0, kserve-modelmesh, docker-selenium, logstash, trino, neo4j, selenium, druid, zipkin, flyway, apache-pulsar, apache-nifi,...

CVE-2026-42584 vulnerabilities

Vulnerabilities for packages: opensearch, strimzi-kafka-operator, wavefront-proxy, akhq, infinispan, keycloak, sonarqube, management-api-for-apache-cassandra-5.0, kserve-modelmesh, docker-selenium, logstash, trino, neo4j, selenium, druid, zipkin, flyway, apache-pulsar, apache-nifi,...