Description
Exposure of the QKEY (used as
input into the ‘OTA-Quantum’ device registration process) and internal
system keys via an unauthenticated and unencrypted HTTP GET method in the Arqit Symmetric Key Agreement Platform.
This issue affects Symmetric Key Agreement Platform: before 26.03.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Arqit | Symmetric Key Agreement Platform | < 26.03 | 26.03 |
References
- https://www.cvcn.gov.it/cvcn/cve/CVE-2026-33583 third-party-advisory