AZL-112181: CVE-2026-105946 affecting package qtbase 6.6.3-7

Q: Which applications are exposed to this issue?

Applications using the Qt Network module are exposed when they use QNetworkAccessManager or QTcpSocket and authenticate with NTLM. The vulnerable package identified is qtbase 6.6.3-7 for azure-linux/qtbase.

Q: What must an attacker control to exploit the vulnerability?

An attacker must be able to provide a crafted NTLM challenge through a malicious server or proxy during NTLM authentication. Successful exploitation can disclose heap memory contents or crash the application.

Published Oct 27, 2026

Updated

Out-of-bounds read in the QAuthenticator NTLM authentication handling in the Qt Network module in Qt Group Qt allows remote attackers to obtain sensitive information (heap memory contents) or cause a denial of service (application crash) via a crafted NTLM challenge sent by a malicious server or proxy, when an application using QNetworkAccessManager or QTcpSocket authenticates with NTLM.

Affected Software

1 affected component

azure-linux/qtbase<=6.6.3-7

Event History

Oct 27, 2026

Advisory Published

via OSV·07:16 AM

Data Sourced

via OSV·07:16 AM

DescriptionAffected Software

Child vulnerabilities

Contains the following vulnerabilities.

CVE-2026-105946

Frequently Asked Questions

Which applications are exposed to this issue?

Applications using the Qt Network module are exposed when they use QNetworkAccessManager or QTcpSocket and authenticate with NTLM. The vulnerable package identified is qtbase 6.6.3-7 for azure-linux/qtbase.

What must an attacker control to exploit the vulnerability?

An attacker must be able to provide a crafted NTLM challenge through a malicious server or proxy during NTLM authentication. Successful exploitation can disclose heap memory contents or crash the application.

AZL-112181: CVE-2026-105946 affecting package qtbase 6.6.3-7

Affected Software

Event History

Child vulnerabilities

Frequently Asked Questions

Which applications are exposed to this issue?

What must an attacker control to exploit the vulnerability?

Company

Resources

Contact

Frequently Asked Questions

Which applications are exposed to this issue?

What must an attacker control to exploit the vulnerability?