{"id":"CVE-2026-33584","state":"PUBLISHED","title":"Arqit SKA-Platform Enables Access to Debug Information","description":"Exposed Keycloak management \nservice in the Arqit Symmetric Key Agreement Platform enables unauthorized access to sensitive debug \ninformation such as metrics and\n health data. This issue affects Symmetric Key Agreement Platform: before 26.03.","publishedAt":"2026-05-13T18:30:48.206Z","updatedAt":"2026-05-13T19:39:01.096Z","severity":{"score":5.3,"label":"Medium","version":"3.1","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","source":"ENISA"},"assigner":"ENISA","products":["Arqit Symmetric Key Agreement Platform"],"affected":[{"vendor":"Arqit","product":"Symmetric Key Agreement Platform","defaultStatus":"unaffected","versions":[{"version":"0","status":"affected","lessThan":"26.03","versionType":"semver"}]}],"references":["https://www.cvcn.gov.it/cvcn/cve/CVE-2026-33584"],"weaknesses":["CWE-749"],"ingestedAt":"2026-10-29T20:11:40.391Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2026/33xxx/CVE-2026-33584.json","commit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.2","cveMetadata":{"cveId":"CVE-2026-33584","state":"PUBLISHED","datePublished":"2026-05-13T18:30:48.206Z","dateUpdated":"2026-05-13T19:39:01.096Z","assignerShortName":"ENISA","assignerOrgId":"a6d3dc9e-0591-4a13-bce7-0f5b31ff6158","dateReserved":"2026-03-23T12:53:47.473Z"},"containers":{"cna":{"title":"Arqit SKA-Platform Enables Access to Debug Information","descriptions":[{"lang":"en","value":"Exposed Keycloak management \nservice in the Arqit Symmetric Key Agreement Platform enables unauthorized access to sensitive debug \ninformation such as metrics and\n health data. This issue affects Symmetric Key Agreement Platform: before 26.03."}],"affected":[{"vendor":"Arqit","product":"Symmetric Key Agreement Platform","defaultStatus":"unaffected","versions":[{"version":"0","status":"affected","lessThan":"26.03","versionType":"semver"}]}],"references":[{"url":"https://www.cvcn.gov.it/cvcn/cve/CVE-2026-33584","tags":["third-party-advisory"]}],"metrics":[{"format":"CVSS","scenarios":[{"lang":"en","value":"GENERAL"}],"cvssV3_1":{"version":"3.1","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"NONE","availabilityImpact":"NONE","baseSeverity":"MEDIUM","baseScore":5.3,"vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N"}}],"problemTypes":[{"descriptions":[{"cweId":"CWE-749","lang":"en","description":"CWE-749 Exposed dangerous method or function","type":"CWE"}]}],"providerMetadata":{"shortName":"ENISA","orgId":"a6d3dc9e-0591-4a13-bce7-0f5b31ff6158","dateUpdated":"2026-05-13T18:35:29.330Z"},"source":{"discovery":"UNKNOWN"},"x_generator":{"engine":"Vulnogram 1.0.2"}},"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"timestamp":"2026-05-13T19:37:59.672987Z","id":"CVE-2026-33584","options":[{"Exploitation":"none"},{"Automatable":"yes"},{"Technical Impact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}}],"providerMetadata":{"shortName":"CISA-ADP","orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","dateUpdated":"2026-05-13T19:39:01.096Z"}}]}}}