UBUNTU-CVE-2026-116337: Low severity ubuntu/qtbase-opensource-src vulnerability
Published Nov 9, 2026
·Updated
Uncontrolled resource consumption vulnerability in the Qt Framework HTTP response handling functionality of the Qt Network module.
Affected Software
11 affected components
ubuntu/qtbase-opensource-src*
ubuntu/qtbase-opensource-src*
ubuntu/qtbase-opensource-src*
ubuntu/qt6-base*
ubuntu/qtbase-opensource-src*
ubuntu/qt6-base*
ubuntu/qtbase-opensource-src*
ubuntu/qt6-base*
ubuntu/qtbase-opensource-src*
ubuntu/qt6-base*
ubuntu/qtbase-opensource-src*
Event History
Nov 9, 2026
CVE Published
via OSV·12:00 AM
Data Sourced
via OSV·12:00 AM
DescriptionSeverityAffected Software
Frequently Asked Questions
1
What conditions does exploitation require?
The scoring data indicates that exploitation is network-reachable, has low attack complexity, and does not require attacker privileges. User interaction is required, and the vector also records an additional attack requirement (AT:P).
2
Which systems are in scope?
The affected software listed is ubuntu/qtbase-opensource-src and ubuntu/qt6-base. Exposure is relevant to applications that use the Qt Network module’s HTTP response handling functionality.
3
What impact is reflected in the supplied severity vector?
The vector records no confidentiality impact and no availability impact. It records low integrity impact for both the vulnerable component and subsequent systems.