CVE-2026-79680: Authentication bypass vulnerability in the password authentication mechanism of the Qt VNC Server module
Published Sep 24, 2026
·Updated
Authentication bypass vulnerability in the password authentication mechanism of the Qt VNC Server module. An attacker using a specially modified VNC client that violates the RFB protocol can bypass Qt VNC Server's password authentication and gain unauthorized remote access to the shared application, compromising the confidentiality and integrity of the session.
Affected Software
1 affected component
Qt Qt VNC Server
Event History
Sep 24, 2026
CVE Published
via MITRE·10:56 AM
Data Sourced
via MITRE·10:56 AM
DescriptionWeakness
Data Sourced
via NVD·11:16 AM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What does an attacker need to exploit this issue?
The attacker needs to connect to a Qt VNC Server using a specially modified VNC client that violates the RFB protocol. Successful exploitation bypasses the server's password authentication.
2
What access could an attacker obtain after exploitation?
An attacker can gain unauthorized remote access to the shared application. This can compromise the confidentiality and integrity of the affected session.