CVE-2026-33591Disclosure

LOW

Exploit discussion active in current signal (1 latest mentions)

Immediate actions

  • Patch affected systems immediately
  • Hunt for exploitation attempts and persistence artifacts
  • Increase monitoring for publicly documented tradecraft

Recommended action window: High priority (within 72h)

2.0/ 10 priority

Priority

LOW

Exploitation

NONE

PoC

YES

Patch

AVAILABLE

Momentum

STABLE

Threat summary

  • Public PoC is present in monitored signal
  • Patch or workaround signal is available
  • 5 mentions across 3 observed days
  • Momentum state: stable

What's happening

  • PoC mentioned or linked in 1 signal
  • Patch or workaround mentioned in 1 signal
  • Technical details provided in 4 signals
  • Disclosure: 2 classified signals
  • General: 1 classified signal
  • Peaked 1d ago at 3 mentions (2026-08-04); latest day: 1
  • 5 total mentions across 3 days

Deep dive

Activity timeline5 mentions / 3d
01223Mentions · 2026-08-03: 1Mentions · 2026-08-04: 3Mentions · 2026-08-05: 1PoC Mentioned / Linked · 2026-08-04: 1Patch / Workaround · 2026-08-03: 1Technical Details · 2026-08-03: 1Technical Details · 2026-08-04: 2Technical Details · 2026-08-05: 108-0308-0408-05
Signal classification4 categories
Disclosure
240.0%
Patch
120.0%
General
120.0%
PoC
120.0%
Referenced assets3 URLs
Classification over time
DateTotalLabels
2026-08-031
Patch1
2026-08-043
Disclosure1General1PoC1
2026-08-051
Disclosure1
Full discourse5 posts
  • IT-Connect.fr@ITConnect_fr
    Disclosure

    ⚠️ Vulnérabilité dans WAPT La faille de sécurité CVE-2026-33591 affecte certaines versions de WAPT Server. Cette faille permet de contourner l'authentification. Plus d'infos : https://www.it-connect.fr/wapt-server-cve-2026-33591/ #Cybersécurité #WAPT https://www.it-connect.fr/wapt-server-cve-2026-33591/

    Post summary

    The post announces CVE-2026-33591 impacts WAPT Server by enabling authentication bypass, linking to an external site for more details but not providing exploit or patch information.

    070921.4K
    11.6K followersView on X
  • ExploitGrid@exploitgrid
    PoC

    [CVE] CVE-2026-33591 [HIGH PRIORITY] #Authentication bypass on WaptServer 🔗 https://exploitgrid.net/cve/CVE-2026-33591

    Post summary

    A high‑priority authentication bypass vulnerability (CVE‑2026‑33591) is referenced with a link to ExploitGrid, indicating a PoC is likely available, but no active exploitation, patch, or false‑positive information is provided.

    1000026
    29 followersView on X
  • ExploitGrid@exploitgrid
    General

    🛡️# ExploitGrid Daily #Threat Digest Top Vulnerabilities (CVEs) of the day CVE-2026-33591 CVE-2026-48323 CVE-2026-48330 CVE-2026-48331 CVE-2026-48326 ..🧵👇

    Post summary

    The post merely aggregates a list of CVE identifiers for the day without providing further context, evidence, or actionable information.

    1000039
    29 followersView on X
  • thibault@akril
    Disclosure

    [IT-Connect] - WAPT Server (CVE-2026-33591) : une faille permet de contourner l’authentification - https://www.it-connect.fr/wapt-server-cve-2026-33591/ 👌😁

    Post summary

    The post announces WAPT Server CVE-2026-33591, noting an authentication bypass flaw and linking to an article for further details.

    0000064
    683 followersView on X
  • SecAlerts@SecAlertsCo
    Patch

    CVE-2026-33591: CVSS 10 auth bypass in Wapt Server pre-2.6.1.17813. A crafted packet lets any remote attacker grab a valid session token with zero credentials. 🔓 Patch to 2.6.1.17813 now. #cybersecurity #vulnerabilities #ciso #mssp https://secalerts.co/vulnerability/CVE-2026-33591?utm_campaign=x https://t.co/PS3fPjWCSm

    Post summary

    A CVE-2026-33591 in Wapt Server allows an auth bypass via a crafted packet, but a patch to version 2.6.1.17813 has been released to remediate the issue.

    00000249
    871 followersView on X

Explore more