---
id: CVE-2026-114366
title: >-
  Information disclosure vulnerability in authentication handling of QWebSocket
  impacts Qt Framework
summary: >-
  An information disclosure vulnerability in the Qt Framework QWebSocket
  authentication handling of the Qt WebSockets module.
severity: low
cvss: 2.3
cvssVector: >-
  CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:U/AU:N/RE:L/U:Green
cvssSource: cna
cwe:
  - CWE-226
vendor: qt
product: Qt Framework
affected:
  - framework >= 6.6.0 < 6.8.10
  - framework >= 6.9.0 < 6.11.3
  - framework >= 6.12.0 < 6.12.1
published: '2026-11-06'
updated: '2026-11-06'
sourceUpdated: '2026-11-06T04:40:04.282Z'
source: CVEORG
sourceUrl: 'https://www.cve.org/CVERecord?id=CVE-2026-114366'
references:
  - url: >-
      https://wiki.qt.io/List_of_known_vulnerabilities_in_Qt_products#CVE-2026-114366
  - url: 'https://codereview.qt-project.org/c/qt/qtwebsockets/+/772273'
tags:
  - cve.org
ingestedAt: '2026-11-06T05:45:37.083Z'
---

## Overview

An information disclosure vulnerability in the Qt Framework QWebSocket authentication handling of the Qt WebSockets module.

## Affected

- `framework >= 6.6.0 < 6.8.10`
- `framework >= 6.9.0 < 6.11.3`
- `framework >= 6.12.0 < 6.12.1`

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.