CVE-2026-40273: Vulnerabilities in the QNX Neutrino kernel affect QNX Software Development Platform and QNX OS for Safety

Published Nov 10, 2026

Updated

Improper Input Validation in a procnto message handler could allow an attacker with local access to send a crafted message which can cause an information disclosure in the QNX Neutrino kernel

Affected Software

3 affected components

QNX QNX Neutrino kernel

QNX QNX Software Development Platform

QNX QNX OS for Safety

Event History

Nov 10, 2026

CVE Published

via MITRE·07:06 PM

Data Sourced

via MITRE·07:06 PM

DescriptionSeverityWeakness

Data Sourced

via NVD·07:21 PM

DescriptionSeverityWeakness

Frequently Asked Questions

Who is exposed to this issue?

Systems using the QNX Neutrino kernel, including QNX Software Development Platform and QNX OS for Safety, are in scope. Exploitation requires local access to the affected system.

What does an attacker need to do to exploit it?

An attacker needs to send a crafted message to a procnto message handler. No privileges or user interaction are required according to the provided vector.

What is the expected impact?

Successful exploitation can disclose information from the QNX Neutrino kernel. The provided assessment indicates confidentiality impact only, with no integrity or availability impact.

CVE-2026-40273: Vulnerabilities in the QNX Neutrino kernel affect QNX Software Development Platform and QNX OS for Safety

Affected Software

Event History

Frequently Asked Questions

Who is exposed to this issue?

What does an attacker need to do to exploit it?

What is the expected impact?

Company

Resources

Contact

Frequently Asked Questions

Who is exposed to this issue?

What does an attacker need to do to exploit it?

What is the expected impact?