NuytsTech Security

CVE-2026-33585

by ·

Improper management of the idle timeout parameter in the Keycloak interface of the Arqit SKA-Platform enables an attacker to impersonate an authenticated tenant user via an unexpired browser session.

This issue affects Symmetric Key Agreement Platform: before 26.03.

More information : https://www.cvcn.gov.it/cvcn/cve/CVE-2026-33585

Tags: