Live › vulnerability › CVE-2026-95620
Go to dashboardThe Qt Network module's QNetworkAccessManager HTTP/2 client contains a use-after-free bug. A malicious or compromised HTTP/2 server can crash the client application, which affects availability only.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-23 21:57 UTC. All times on this page are UTC.
Applications built on the Qt Network module that make HTTP/2 requests through QNetworkAccessManager and may talk to untrusted or compromised servers. Apps that only use HTTP/1.1 or only talk to trusted servers are less exposed. unknown whether the sources specify affected Qt versions.
No product ranges from the sources yet.
Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
A use-after-free vulnerability in the Qt QNetworkAccessManager HTTP/2 client support of the Qt Network module allows a malicious or compromised HTTP/2 server to cause the client application to crash, affecting availability.
This page as .md · .json · in your agent: get_signal("CVE-2026-95620")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.