CVE-2026-79680

Published: Sep 24, 2026Modified: Sep 24, 2026

4.5

Vector

CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:A/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/E:U/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:D/RE:L/U:X

CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:A/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/E:U/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:D/RE:L/U:XShow less

Source: a59d8014-47c4-4630-ab43-e1b13cbe58e3 (Secondary)

Description

Authentication bypass vulnerability in the password authentication mechanism of the Qt VNC Server module. An attacker using a specially modified VNC client that violates the RFB protocol can bypass Qt VNC Server's password authentication and gain unauthorized remote access to the shared application, compromising the confidentiality and integrity of the session.

Related CWEs

CWE-288

Authentication Bypass Using an Alternate Path or Channel

A product requires authentication, but the product has an alternate path or channel that does not require authentication.

References (2)

https://codereview.qt-project.org/c/qt/tqtc-qtvncserver/+/759160

Source: a59d8014-47c4-4630-ab43-e1b13cbe58e3

https://wiki.qt.io/List_of_known_vulnerabilities_in_Qt_products#CVE-2026-79680:

Source: a59d8014-47c4-4630-ab43-e1b13cbe58e3

Timeline

No history available yet.