Approved changes feed: RSS · Atom

cpe:2.3:a:arqit:symmetric_key_agreement_platform:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorArqit (1c681e87-d344-5932-a541-28e0f4d50ad8)
ProductSymmetric Key Agreement Platform (3366df38-edf0-5675-82c6-372dc81ecbae)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2026-33585 vulnerable 2026-06-08 07:59:10.413484 Arqit SKA-Platform Improper Handling of Parameters Vulnerability
LOW (3.8)
Improper management of the idle timeout parameter in the Keycloak interface of the Arqit SKA-Platform enables an attacker to impersonate an authenticated tenant user via an unexpired browser session. This issue affects Symmetric Key Agreement Platform: before 26.03.
Published: 2026-05-13T18:46:13.920Z
Updated: 2026-05-13T19:31:17.058Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-33584 vulnerable 2026-06-08 07:59:10.413175 Arqit SKA-Platform Enables Access to Debug Information
MEDIUM (5.3)
Exposed Keycloak management service in the Arqit Symmetric Key Agreement Platform enables unauthorized access to sensitive debug information such as metrics and health data. This issue affects Symmetric Key Agreement Platform: before 26.03.
Published: 2026-05-13T18:30:48.206Z
Updated: 2026-05-13T19:39:01.096Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-33583 vulnerable 2026-06-08 07:59:10.412723 Arqit SKA-Platform Vulnerable to Key Exposure
HIGH (8.7)
Exposure of the QKEY (used as input into the ‘OTA-Quantum’ device registration process) and internal system keys via an unauthenticated and unencrypted HTTP GET method in the Arqit Symmetric Key Agreement Platform. This issue affects Symmetric Key Agreement Platform: before 26.03.
Published: 2026-05-13T18:19:34.651Z
Updated: 2026-05-13T18:57:55.074Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.