Signal is active with 3 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
Exposure of the QKEY (used as input into the ‘OTA-Quantum’ device registration process) and internal system keys via an unauthenticated and unencrypted HTTP GET method in the Arqit Symmetric Key Agreement Platform. This issue affects Symmetric Key Agreement Platform: before 26.03.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
NONE
CVE-2026-33583 Unauthenticated HTTP Exposure of QKEY and System Keys in Arqit Symmetric Key Agreement Platform https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-33583
Post summary
The snippet announces CVE-2026-33583 as an unauthenticated HTTP exposure that can reveal QKEY and system keys on the Arqit Symmetric Key Agreement Platform, with no evidence of PoC, exploitation, patch, or false-positive claims.
🚨*CVE* CVE-2026-33583 Exposure of the QKEY (used as input into the ‘OTA-Quantum’ device registration process) and internal system keys via an unauthenticated and unencrypted HTTP GET met… https://www.cve.org/CVERecord?id=CVE-2026-33583 ----- Traducción: Exposición de la Q… http://infoflow.cloud`
Post summary
This post announces CVE‑2026‑33583, describing an unauthenticated HTTP GET that exposes QKEY and internal system keys during OTA registration, with no PoC, exploit tool, or patch information referenced.
CVE-2026-33583 Exposure of the QKEY (used as input into the ‘OTA-Quantum’ device registration process) and internal system keys via an unauthenticated and unencrypted HTTP GET met… https://www.cve.org/CVERecord?id=CVE-2026-33583
Post summary
The text announces CVE‑2026‑33583, describing unauthenticated exposure of QKEY and internal system keys via an unencrypted HTTP GET request, with no evidence of PoC, exploitation, or patch information.