VULNERABILITY INTELLIGENCE
CVE-2026-33591
EPSS probability0.71%
CISA KEVNot currently listed
Published2026-08-03
Last modified2026-10-23
Description
A vulnerability in Wapt Server before version 2.6.1.17813 allows a remote unauthenticated attacker to bypass security restriction using a specially crafted packet and retrieve a valid session token for the targeted account.
Weakness classification
- a6d3dc9e-0591-4a13-bce7-0f5b31ff6158: CWE-288