Vulnerability in Tranquil It Systems Wapt Server
CVE-2026-33591
A vulnerability in Wapt Server before version 2.6.1.17813 allows a remote unauthenticated attacker to bypass security restriction using a specially crafted packet and retrieve a valid session token for the targeted account.
Affected products
- Tranquil It Systems Wapt Server — versions 2.6.0.16767
Weakness classification (CWE)
References
- a6d3dc9e-0591-4a13-bce7-0f5b31ff6158 (release-notes)
- a6d3dc9e-0591-4a13-bce7-0f5b31ff6158 (release-notes)
- a6d3dc9e-0591-4a13-bce7-0f5b31ff6158 (vendor-advisory)