CVE-2026-105946

— UNSCORED

Published 2026-10-27 · Updated 2026-10-27

AI analysis for this CVE has not been generated yet. Raw NVD data is shown below.

NVD description

Out-of-bounds read in the QAuthenticator NTLM authentication handling in the Qt Network module in Qt Group Qt allows remote attackers to obtain sensitive information (heap memory contents) or cause a denial of service (application crash) via a crafted NTLM challenge sent by a malicious server or proxy, when an application using QNetworkAccessManager or QTcpSocket authenticates with NTLM.

Weaknesses

CWE-125

All references

https://codereview.qt-project.org/c/qt/qtbase/+/744448
https://codereview.qt-project.org/c/qt/qtbase/+/745457
https://codereview.qt-project.org/c/qt/qtbase/+/745464
https://wiki.qt.io/List_of_known_vulnerabilities_in_Qt_products#CVE-2026-105946:

Source data: NVD (nvd.nist.gov), public domain. Exploit-DB.ai adds local AI analysis for defensive use only.

Related CVEs

LOWCVE-2024-58392PoC
MEDIUMCVE-2024-58397PoC
MEDIUMCVE-2024-58399PoC
MEDIUMCVE-2025-60494PoC
MEDIUMCVE-2025-71438PoC
MEDIUMCVE-2025-71439PoC
MEDIUMCVE-2026-100126
MEDIUMCVE-2026-100130

Related by shared AI tags and CWE weakness class. Browse the full archive.