Resource Exhaustion Vulnerability in Qt HTTP Server by The Qt Company
CVE-2026-110944

2.7LOW

Key Information:

Vendor

Qt

Status
Qt Framework
Vendor
CVE Published:
4 November 2026

What is CVE-2026-110944?

This vulnerability affects the QHttpServer component of Qt HTTP Server, where an attacker can exploit weaknesses in HTTP request handling. By sending a high volume of requests, an attacker can lead to resource exhaustion, causing the server to become unresponsive. This could potentially impact service availability and disrupt normal operations. Users of Qt HTTP Server are advised to review their security configurations and consider applying patches to mitigate this risk.

Affected Version(s)

Qt Framework 6.4.0 < 6.11.3

Qt Framework 6.12.0 < 6.12.1

References

https://wiki.qt.io/List_of_known_vulnerabilities_in_Qt_pr...
vendor-advisory
https://codereview.qt-project.org/c/qt/qthttpserver/+/768560
patch
https://codereview.qt-project.org/c/qt/qthttpserver/+/768934
patch

CVSS V4

Score:
2.7
Severity:
LOW
Confidentiality:
None
Integrity:
None
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.