CVE-2026-33591EPSS p52.1%

CVE-2026-33591CVE-2026-33591

Description

A vulnerability in Wapt Server before version 2.6.1.17813 allows a  remote unauthenticated attacker to bypass security restriction using a specially crafted packet and retrieve a valid session token for the targeted account.

Scoring

EPSS0.71% probability of exploitation · percentile 52.1% · 2026-10-06T12:00:23Z
Last modified2026-09-01
Sourced from NVD + FIRST.org EPSS. Curated for EU compliance use cases by Adam Lundqvist, Founder at SQUR.