CRITICAL 10.0 NVD
CVE-2026-33591
A vulnerability in Wapt Server before version 2.6.1.17813 allows a remote unauthenticated attacker to bypass security restriction using a specially crafted pac
A vulnerability in Wapt Server before version 2.6.1.17813 allows a remote unauthenticated attacker to bypass
security restriction using a specially crafted packet and retrieve a valid
session token for the targeted account.
References
- https://www.wapt.fr/en/doc/wapt-changelog.html#wapt-2-6-0-16856-2026-06-09
- https://www.wapt.fr/en/doc/wapt-changelog.html#wapt-2-6-1-17813-2026-06-09
- https://www.wapt.fr/en/doc/wapt-security-bulletin.html
This critical severity vulnerability with a CVSS score of 10.0 was published on 2026-08-03 via NVD.
Risk Timeline
CVE Disclosed2026-08-03 · 0 days ago
Remediation Resources
Official Advisory
www.wapt.fr/en/doc/wapt-security-bulletin.html
vulnfeed aggregates 9166 vulnerabilities from NVD, CISA KEV,
Ubuntu, Debian, Red Hat, Kubernetes, Exploit-DB, OSS-Security, GitHub and OpenStack — updated every 4 hours.