CVE-2026-33591 — Authentication bypass on WaptServer
A vulnerability in Wapt Server before version 2.6.1.17813 allows a remote unauthenticated attacker to bypass security restriction using a specially crafted packet and retrieve …
Published: 2026-08-03 · CVSS: 10.0 · CVSS 4.0
A vulnerability in Wapt Server before version 2.6.1.17813 allows a remote unauthenticated attacker to bypass security restriction using a specially crafted packet and retrieve a valid session token for the targeted account.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7