CVE-2026-33585 — Arqit SKA-Platform Improper Handling of Parameters Vulnerability

CVE-2026-33585

Arqit SKA-Platform Improper Handling of Parameters Vulnerability PUBLISHED

Description (CNA)

Improper management of the idle timeout parameter in the Keycloak interface of the Arqit SKA-Platform enables an attacker to impersonate an authenticated tenant user via an unexpired browser session. This issue affects Symmetric Key Agreement Platform: before 26.03.

Affected (CNA)

Vendor / product	Versions
Arqit / Symmetric Key Agreement Platform	affected 0 before 26.03

CWE

CWE-233

References

https://www.cvcn.gov.it/cvcn/cve/CVE-2026-33585

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.