CVE-2026-33583CWE-749
Arqit SKA-Platform Vulnerable to Key Exposure
High · published May 13, 2026
What it is
Exposure of the QKEY (used as
input into the ‘OTA-Quantum’ device registration process) and internal
system keys via an unauthenticated and unencrypted HTTP GET method in the Arqit Symmetric Key Agreement Platform.
This issue affects Symmetric Key Agreement Platform: before 26.03.
The record
Technical detail
- CVSS v3.1
- 8.7 · HIGH
- Vector
- CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:N
- CVSS v4.0
- Not supplied
- EPSS
- 0.00341 · 26.4th percentile
- Weakness
- CWE-749 · Exposed Dangerous Method or Function
- Published
- 2026-05-13T18:19Z
EPSS history
Timeline