CVE-2026-95620Low· 2.1▾ SunlitA use-after-free vulnerability in the Qt QNetworkAccessManager HTTP/2 client support of the Qt Network module allows a malicious or compromised HTTP/2 server to cause the client application to crash, affecting availability.
▾ Sunlit zone — Low / medium · no exploitation signal
impact 11.6 · likelihood 0 · exploitation 0
Need a working PoC? Pro members can cast a request and our team develops one — it lands right here.
Exploit-prediction probability, daily snapshots since Oct 25.
Disclosure to exploitation, from the record and what we observed since indexing it.
Disclosed via CVEORG
0.4%
A use-after-free vulnerability in the Qt QNetworkAccessManager HTTP/2 client support of the Qt Network module allows a malicious or compromised HTTP/2 server to cause the client application to crash, affecting availability.
qt >= 6.9.0 < 6.11.3Refer to the linked advisories for vendor-supplied fixes and affected version ranges.
Connected by shared product, vendor, weakness, or advisory.
CVE-2026-107590Low· 1.9Out-of-bounds write vulnerability in QTextCodec iconv-based encoding impacts Qt
CVE-2026-107472Medium· 4.3Out-of-bounds read vulnerability in QTextCodec TSCII encoding impacts Qt
CVE-2026-105946Medium· 5.3Out-of-bounds read vulnerability in NTLM authentication handling impacts Qt
CVE-2026-107157Low· 2.0Out-of-bounds read vulnerability in QCborValue::fromCbor() impacts Qt Framework
CVE-2026-96432Low· 2.1Null pointer dereference vulnerability in QNetworkAccessManager impacts Qt
CVE-2026-16762High· 8.7Denial-of-service vulnerability in the Qt Core QXmlStream parser (QXmlStreamReader) impacts Qt