CVE-2026-105946
Out-of-bounds read vulnerability in NTLM authentication handling impacts Qt
CVSS Score
0.0
EPSS Score
0.0%
EPSS Percentile
0th
Out-of-bounds read in the QAuthenticator NTLM authentication handling in the Qt Network module in Qt Group Qt allows remote attackers to obtain sensitive information (heap memory contents) or cause a denial of service (application crash) via a crafted NTLM challenge sent by a malicious server or proxy, when an application using QNetworkAccessManager or QTcpSocket authenticates with NTLM.
| CWE | CWE-125 |
| Vendor | qt |
| Product | qt |
| Published | Oct 27, 2026 |
Stay Ahead of the Next One
Get instant alerts for qt qt
Be the first to know when new unknown vulnerabilities affecting qt qt are published — delivered to Slack, Telegram or Discord.
Get Free Alerts →
Free · No credit card · 60 sec setup
Affected Versions
qt / qt
6.8.0 < 6.8.10 6.9.0 < 6.11.2
References
wiki.qt.io: https://wiki.qt.io/List_of_known_vulnerabilities_in_Qt_products#CVE-2026-105946: codereview.qt-project.org: https://codereview.qt-project.org/c/qt/qtbase/+/745457 codereview.qt-project.org: https://codereview.qt-project.org/c/qt/qtbase/+/744448 codereview.qt-project.org: https://codereview.qt-project.org/c/qt/qtbase/+/745464