{"id":"CVE-2026-33584","aliases":["EUVD-2026-30114","GHSA-7rhj-w7pg-37v4"],"status":"published","title":"Arqit SKA-Platform Enables Access to Debug Information","description":"Exposed Keycloak management \nservice in the Arqit Symmetric Key Agreement Platform enables unauthorized access to sensitive debug \ninformation such as metrics and\n health data. This issue affects Symmetric Key Agreement Platform: before 26.03.","severity":{"version":"3.1","score":5.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","level":"medium","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-11","score":0.00305,"percentile":0.23554,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-749"],"published":"2026-05-13T18:30:48Z","modified":"2026-10-26T17:10:03Z","products":[{"vendor":"arqit","product":"symmetric key agreement platform"}],"references":[{"url":"https://www.cvcn.gov.it/cvcn/cve/CVE-2026-33584","tags":["third-party-advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-33584"},{"url":"https://github.com/advisories/GHSA-7rhj-w7pg-37v4"}],"sources":{"cve":[{"id":"CVE-2026-33584","title":"Arqit SKA-Platform Enables Access to Debug Information","description":"Exposed Keycloak management \nservice in the Arqit Symmetric Key Agreement Platform enables unauthorized access to sensitive debug \ninformation such as metrics and\n health data. This issue affects Symmetric Key Agreement Platform: before 26.03.","status":"published","published":"2026-05-13T18:30:48.206Z","modified":"2026-05-13T19:39:01.096Z","cvss":[{"version":"3.1","score":5.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","level":"medium","assessor":"cna"}],"cwes":["CWE-749"],"updated_at":"2026-11-02T14:20:08.009733Z"}],"euvd":[{"id":"EUVD-2026-30114","description":"Exposed Keycloak management \nservice in the Arqit Symmetric Key Agreement Platform enables unauthorized access to sensitive debug \ninformation such as metrics and\n health data. This issue affects Symmetric Key Agreement Platform: before 26.03.","status":"published","published":"2026-05-13T18:30:48Z","modified":"2026-05-13T19:39:01Z","cvss":[{"version":"3.1","score":5.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","level":"medium"}],"updated_at":"2026-11-02T19:04:32.516693Z"}],"ghsa":[{"id":"GHSA-7rhj-w7pg-37v4","title":"Exposed Keycloak management \nservice in the Arqit Symmetric Key Agreement Platform enables...","description":"Exposed Keycloak management \nservice in the Arqit Symmetric Key Agreement Platform enables unauthorized access to sensitive debug \ninformation such as metrics and\n health data. This issue affects Symmetric Key Agreement Platform: before 26.03.","status":"published","published":"2026-05-13T21:32:05Z","modified":"2026-05-13T21:32:13Z","cvss":[{"version":"3.1","score":5.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","level":"medium"}],"cwes":["CWE-749"],"updated_at":"2026-11-02T15:08:07.741271Z"}],"nvd":[{"id":"CVE-2026-33584","description":"Exposed Keycloak management \nservice in the Arqit Symmetric Key Agreement Platform enables unauthorized access to sensitive debug \ninformation such as metrics and\n health data. This issue affects Symmetric Key Agreement Platform: before 26.03.","status":"published","published":"2026-05-13T19:17:07.183Z","modified":"2026-10-26T17:10:03.27Z","cvss":[{"version":"3.1","score":5.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","level":"medium","assessor":"secondary"}],"cwes":["CWE-749"],"updated_at":"2026-11-02T14:12:19.020465Z"}]}}