Low severity3.8NVD Advisory· Published May 13, 2026· Updated May 14, 2026

CVE-2026-33585

Description

Improper management of the idle timeout parameter in the Keycloak interface of the Arqit SKA-Platform enables an attacker to impersonate an authenticated tenant user via an unexpired browser session.

This issue affects Symmetric Key Agreement Platform: before 26.03.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Arqit/Symmetric Key Agreement Platformllm-create
Range: before 26.03

Patches

Vulnerability mechanics

References

www.cvcn.gov.it/cvcn/cve/CVE-2026-33585nvd

News mentions

No linked articles in our index yet.

cvss	0.247
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000