CVE-2026-95620
Use-after-free vulnerability in QNetworkAccessManager HTTP/2 support impacts Qt
LOW
2.1
CVSS Score
Published: October 23, 2026 at 10:56 AM UTC
Updated: October 23, 2026 at 07:45 PM UTC
1 product affected across 1 vendorQt
Using qt by qt?
Get instant alerts when new vulnerabilities affect qt - before attackers find them.
Real-time alertsTrack your software stackFree plan available
Severity
LOW2.1
Exploit prediction
EPSS 0.2%
Description
A use-after-free vulnerability in the Qt QNetworkAccessManager HTTP/2 client support of the Qt Network module allows a malicious or compromised HTTP/2 server to cause the client application to crash, affecting availability.
Remediation
No guide yetNo remediation guidance has been written for this CVE yet. What the record does show:
References (2)
Vendor Advisory
Source: cverecord
https://wiki.qt.io/List_of_known_vulnerabilities_in_Qt_products#CVE-2026-95620:CVSS
2.1LOWQt
Vector?
Quick Info
StatusAWAITING ANALYSIS
CWE
CWE-416
Get alerted
Stop reading CVE feeds looking for your own stack
Track the products you run and VulnTracker tells you when a new CVE affects them — with what is known about fixing it, and nothing about the rest.
Free plan, no card