CVE-2026-33591
CRITICAL—CVSS v3
—CVSS v2
0.71%
EPSS (exploit probability)
CWE-288CWE
Description
A vulnerability in Wapt Server before version 2.6.1.17813 allows a remote unauthenticated attacker to bypass
security restriction using a specially crafted packet and retrieve a valid
session token for the targeted account.
Affected routers (0)
No routers currently mapped to this CVE in our database.