PatchSiren

Arqit CVE debriefs

These pages are published after PatchSiren validates generated defensive summaries against stored public CVE and source evidence.

HIGH Arqit CVE published 2026-05-13

CVE-2026-33583

CVE-2026-33583 debrief based on the supplied source corpus. The CVE record was published on 2026-05-13T19:17:06.873Z and has not been modified since then. This issue affects Symmetric Key Agreement Platform versions before 26.03. The Arqit Symmetric Key Agreement Platform exposes QKEY and internal system keys via an unauthenticated and unencrypted HTTP GET method, potentially allowing unauthorized access. [truncated]