VulnSocial

CVE-2026-105946

LOWCVSS 5.3 · MEDIUM

Signal is active with 1 mentions in latest observed window

Immediate actions

  • Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

Out-of-bounds read in the QAuthenticator NTLM authentication handling in the Qt Network module in Qt Group Qt allows remote attackers to obtain sensitive information (heap memory contents) or cause a denial of service (application crash) via a crafted NTLM challenge sent by a malicious server or proxy, when an application using QNetworkAccessManager or QTcpSocket authenticates with NTLM.

Back to dashboard
0.0/ 10 priority

Sources & remediation

Other references
Weakness type (CWE)
CWE-125

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

NONE

Momentum

NONE

Threat summary

  • 1 mentions across 1 observed day

What's happening

  • 1 total mentions across 1 day

Deep dive

Activity timeline1 mentions / 1d
00111Mentions · 2026-10-28: 110-28
Referenced assets1 URL
By indicator
Full discourse1 post
  • Blue Phantom@Im_BluePhantom

    Qt's NTLM handling can leak heap data when a malicious server/proxy requests auth (CVE-2026-105946). QNetworkAccessManager/QTcpSocket users: patch to Qt 6.8.10, 6.11.2 or 6.12.0. Auth parsing is an attack surface. https://www.qt.io/blog/security-advisory-cve-2026-105946

    0001011
    39 followersView on X

Explore more

Back to dashboard