---
id: CVE-2026-110944
title: >-
  Resource exhaustion vulnerability in HTTP request handling impacts Qt HTTP
  Server (QHttpServer)
summary: >-
  Resource exhaustion vulnerability in the HTTP request handling of the
  QHttpServer component of Qt HTTP Server.
severity: low
cvss: 2.7
cvssVector: >-
  CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:L/E:U/R:U/RE:L/U:Green
cvssSource: cna
cwe:
  - CWE-770
vendor: qt
product: Qt Framework
affected:
  - framework >= 6.4.0 < 6.11.3
  - framework >= 6.12.0 < 6.12.1
published: '2026-11-04'
updated: '2026-11-04'
sourceUpdated: '2026-11-04T07:04:07.151Z'
source: CVEORG
sourceUrl: 'https://www.cve.org/CVERecord?id=CVE-2026-110944'
references:
  - url: >-
      https://wiki.qt.io/List_of_known_vulnerabilities_in_Qt_products#CVE-2026-110944:
    label: 'Qt wiki: List of known vulnerabilities in Qt products'
  - url: 'https://codereview.qt-project.org/c/qt/qthttpserver/+/768560'
  - url: 'https://codereview.qt-project.org/c/qt/qthttpserver/+/768934'
tags:
  - cve.org
epss: 0.00291
epssPercentile: 0.21849
ingestedAt: '2026-11-05T20:33:06.718Z'
---

## Overview

Resource exhaustion vulnerability in the HTTP request handling of the QHttpServer component of Qt HTTP Server.

## Affected

- `framework >= 6.4.0 < 6.11.3`
- `framework >= 6.12.0 < 6.12.1`

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.