CVE-2026-33585

Published: May 13, 2026Modified: Jun 17, 2026Deferred

3.8

Vector

CVSS:3.1/AV:P/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:L

Exploitability: 0.4 / Impact: 3.4

Source: a6d3dc9e-0591-4a13-bce7-0f5b31ff6158 (Secondary)

Description

Improper management of the idle timeout parameter in the Keycloak interface of the Arqit SKA-Platform enables an attacker to impersonate an authenticated tenant user via an unexpired browser session. This issue affects Symmetric Key Agreement Platform: before 26.03.

Related CWEs

CWE-233

Improper Handling of Parameters

The product does not properly handle when the expected number of parameters, fields, or arguments is not provided in input, or if those parameters are undefined.

References (1)

https://www.cvcn.gov.it/cvcn/cve/CVE-2026-33585

Source: a6d3dc9e-0591-4a13-bce7-0f5b31ff6158

Timeline

No history available yet.