3 CVEs in 1 Arqit product, including Symmetric Key Agreement Platform. Newest: CVE-2026-33585 (2026-05-13). Severity, EPSS and public exploits for each.
Improper management of the idle timeout parameter in the Keycloak interface of the Arqit SKA-Platform enables an attacker to impersonate an authenticated tenan…
Exposed Keycloak management
service in the Arqit Symmetric Key Agreement Platform enables unauthorized access to sensitive debug
information such as metrics…
Exposure of the QKEY (used as
input into the ‘OTA-Quantum’ device registration process) and internal
system keys via an unauthenticated and unencrypted HTTP…