CVE-2026-19248: Qt

High severity, CVSS 7.1. EPSS: 0.4% chance of exploitation in the next 30 days.

QDomDocument XML parsing is vulnerable to a remotely-triggerable denial-of-service crash when processing untrusted input.

Affected products

• Qt Qt: from 2.2.0, up to and including 6.8.8; from 6.9.0, up to and including 6.11.1

Published 2026-09-16. Last modified 2026-09-18.