CVE-2026-33583 - Vulnerability Analysis

Overview

Arqit Symmetric Key Agreement Platform < 26.03 contains an information disclosure caused by exposure of QKEY and internal system keys via unauthenticated and unencrypted HTTP GET method, letting remote attackers access sensitive cryptographic keys, exploit requires network access.

Severity & Score

Impact

Remote attackers can access sensitive cryptographic keys, compromising device registration and system security.

Mitigation

Update to version 26.03 or later.

References

• https://www.cvcn.gov.it/cvcn/cve/CVE-2026-33583

Related Resources

• Vulnerability Intelligence Dashboard
• Credential Scanner