Vulnerability Description
A vulnerability in Wapt Server before version 2.6.1.17813 allows a remote unauthenticated attacker to bypass security restriction using a specially crafted packet and retrieve a valid session token for the targeted account.
Related Weaknesses (CWE)
References
- https://www.wapt.fr/en/doc/wapt-changelog.html#wapt-2-6-0-16856-2026-06-09
- https://www.wapt.fr/en/doc/wapt-changelog.html#wapt-2-6-1-17813-2026-06-09
- https://www.wapt.fr/en/doc/wapt-security-bulletin.html
FAQ
What is CVE-2026-33591?
CVE-2026-33591 is a documented vulnerability. A vulnerability in Wapt Server before version 2.6.1.17813 allows a remote unauthenticated attacker to bypass security restriction using a specially crafted packet and retrieve a valid session token f...
How severe is CVE-2026-33591?
CVSS scoring is not yet available for CVE-2026-33591. Check NVD for updates.
Is there a patch for CVE-2026-33591?
Check the references section above for vendor advisories and patch information. Review vendor security bulletins for remediation guidance.