---
id: "CVE-2026-114366"
page: "https://infrastack.ai/live/CVE-2026-114366"
kind: "vulnerability"
aliases: ["CVE-2026-114366"]
title: "Qt WebSockets: authentication handling leaks information to attackers"
severity: "low"
cvss: 2.3
epss: null
exploited: false
status: "open"
category: "runtime"
products: []
ecosystems: []
tags: ["c++", "qt", "qwebsocket", "runtime"]
not_affected_if: ["no-qt-websockets"]
published_at: "2026-11-06T05:18:20+00:00"
first_seen_at: "2026-11-06T05:40:16+00:00"
updated_at: "2026-11-06T05:41:12+00:00"
sources: [{"source": "nvd", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-114366", "first_seen_at": "2026-11-06T05:40:16+00:00"}]
exploit_sources: []
---

# Qt WebSockets: authentication handling leaks information to attackers

Link for people: https://infrastack.ai/live/CVE-2026-114366 (this .md is for agents)

The Qt Framework's QWebSocket authentication handling in the Qt WebSockets module discloses information. An attacker may read data that should stay private, according to the NVD entry (CVSS 2.3, low).

_Summary, check and fix written by a model from the sources; labelled as such._

## How to check

- Check whether the application uses the Qt WebSockets module (QWebSocket) and which Qt version it links against

## Timeline

- 2026-11-06T05:40:16+00:00 nvd https://nvd.nist.gov/vuln/detail/CVE-2026-114366

## From the sources

An information disclosure vulnerability in the Qt Framework QWebSocket authentication handling of the Qt WebSockets module.

---

_Free to read, with fair use of about 60 pages a minute. For higher limits or API access: sales@infrastack.ai_