Vulnerability · Published Sep 24, 2026 · Assigned by Qt

CVE-2026-79680Authentication bypass vulnerability in the password authentication mechanism of the Qt VNC Server module

Medium 4.5

In plain English

A medium-severity authentication bypass in qt from qt. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.3% (higher than 28% of all known vulnerabilities).

Severity (CVSS 4.0)4.5Medium

Exploit odds (30 days)0.3%top 72.1% of all CVEs

Exploited in the wildNo reportsCISA SSVC: none

Attack toolingNoneno public tooling known

Official description

Authentication bypass vulnerability in the password authentication mechanism of the Qt VNC Server module. An attacker using a specially modified VNC client that violates the RFB protocol can bypass Qt VNC Server's password authentication and gain unauthorized remote access to the shared application, compromising the confidentiality and integrity of the session.

Affected products (as reported)

Vendor	Product	Versions
qt	qt	6.4.0 – before 6.8.96.9.0 – before 6.11.3

Weakness: CWE-288 · Vector: CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:A/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/E:U/V:D/RE:L

In plain English

Official description

Affected products (as reported)

References