Skip to content
CVE PROGRAM SOURCE RECORD10.0 Critical

CVE-2026-33591

Authentication bypass on WaptServer

Description

A vulnerability in Wapt Server before version 2.6.1.17813 allows a  remote unauthenticated attacker to bypass security restriction using a specially crafted packet and retrieve a valid session token for the targeted account.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Tranquil IT Systems WAPT Server

Default version status: unaffected

  • 2.6.0.16767 to ≤ 2.6.1.17787affected

References