CVE-2026-19248 :: Enginsight Vulnerability Database

Provider	Type	Base Score	Atk. Vector	Atk. Complexity	Priv. Required	Vector
Qt	CNA	7.1 HIGH	NETWORK	LOW	NONE	CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:N/R:U/V:D/RE:L/U:X

Base Score

CVSS 3.x

EPSS Score

Percentile: 36.51%

Early Detection

Affected products identified ahead of NVD analysis through intelligence sources (CNA/ADP records, vendor advisories, Enginsight analysis).

Vendor	Product	Version	Source
qt	qt	2.2.0 ≤ 𝑥 ≤ 6.8.8	CNA
qt	qt	6.9.0 ≤ 𝑥 ≤ 6.11.1	CNA

Debian Releases

Debian Product

Codename

qt6-base

bookworm	postponed
forky	6.11.2+dfsg-5 fixed
sid	6.11.2+dfsg-6 fixed
trixie	no-dsa

qtbase-opensource-src

bookworm	postponed
forky	5.15.19+dfsg-5 fixed
sid	5.15.19+dfsg-6 fixed
trixie	no-dsa

Ubuntu Releases

Ubuntu Product

Codename

qt6-base

jammy	needs-triage
noble	needs-triage
resolute	needs-triage
stonking	needs-triage

qtbase-opensource-src

bionic	needs-triage
focal	needs-triage
jammy	needs-triage
noble	needs-triage
resolute	needs-triage
stonking	needs-triage
xenial	needs-triage

Red Hat Enterprise Linux Releases

Red Hat Product

Release

qt5-qtbase

RHEL 9

0:5.15.9-11.el9_8.2

fixed

qt5-qtbase-common

RHEL 9

0:5.15.9-11.el9_8.2

fixed

qt5-qtbase-devel

RHEL 9

0:5.15.9-11.el9_8.2

fixed

qt5-qtbase-examples

RHEL 9

0:5.15.9-11.el9_8.2

fixed

qt5-qtbase-gui

RHEL 9

0:5.15.9-11.el9_8.2

fixed

qt5-qtbase-mysql

RHEL 9

0:5.15.9-11.el9_8.2

fixed

qt5-qtbase-odbc

RHEL 9

0:5.15.9-11.el9_8.2

fixed

qt5-qtbase-postgresql

RHEL 9

0:5.15.9-11.el9_8.2

fixed

qt5-qtbase-private-devel

RHEL 9

0:5.15.9-11.el9_8.2

fixed

qt5-qtbase-static

RHEL 9

0:5.15.9-11.el9_8.2

fixed

Amazon Linux Releases

Amazon Package

Release

qt5-qtbase

Amazon Linux 2

0:5.15.3-1.amzn2.0.3

fixed

qt5-qtbase-common

Amazon Linux 2

0:5.15.3-1.amzn2.0.3

fixed

qt5-qtbase-debuginfo

Amazon Linux 2

0:5.15.3-1.amzn2.0.3

fixed

qt5-qtbase-devel

Amazon Linux 2

0:5.15.3-1.amzn2.0.3

fixed

qt5-qtbase-examples

Amazon Linux 2

0:5.15.3-1.amzn2.0.3

fixed

qt5-qtbase-gui

Amazon Linux 2

0:5.15.3-1.amzn2.0.3

fixed

qt5-qtbase-mysql

Amazon Linux 2

0:5.15.3-1.amzn2.0.3

fixed

qt5-qtbase-odbc

Amazon Linux 2

0:5.15.3-1.amzn2.0.3

fixed

qt5-qtbase-postgresql

Amazon Linux 2

0:5.15.3-1.amzn2.0.3

fixed

qt5-qtbase-private-devel

Amazon Linux 2

0:5.15.3-1.amzn2.0.3

fixed

qt5-qtbase-static

Amazon Linux 2

0:5.15.3-1.amzn2.0.3

fixed

Common Weakness Enumeration

CWE-674 - Uncontrolled Recursion
The product does not properly control the amount of recursion which takes place, consuming excessive resources, such as allocated memory or the program stack.

References

https://codereview.qt-project.org/c/qt/qtbase/+/740427