Resource Exhaustion Vulnerability in Qt WebSockets Module by Qt
CVE-2026-114369

2.7LOW

Key Information:

Vendor

Qt

Status
Qt Framework
Vendor
CVE Published:
12 November 2026

What is CVE-2026-114369?

A resource exhaustion vulnerability exists in the Qt Framework's QWebSocket and QWebSocketServer classes, potentially allowing an attacker to deplete server resources. This could lead to service disruptions, affecting application availability. The issue arises during the handling of WebSocket connections, which may be targeted for malicious exploitation. Users are advised to update to the latest version to mitigate this risk.

Affected Version(s)

Qt Framework 5.15.0 <= 6.8.9

Qt Framework 6.9.0 <= 6.12.0

References

https://www.qt.io/security-advisories?search=CVE-2026-114369
vendor-advisory
https://codereview.qt-project.org/c/qt/qtwebsockets/+/772146
patch
https://codereview.qt-project.org/c/qt/qtwebsockets/+/772145
patch

CVSS V4

Score:
2.7
Severity:
LOW
Confidentiality:
None
Integrity:
None
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.