CVE-2026-97845

CVSS 4.3 (medium) · published 2026-11-12

An uncontrolled recursion vulnerability has been discovered in the Qt QXmlSimpleReader XML parsing functionality of the Qt 5 Core Compatibility APIs module (Qt 6) and the Qt XML module (Qt 5).

Weakness: CWE-674

Source: NVD CVE-2026-97845

References

• https://codereview.qt-project.org/c/qt/qt5compat/+/760219
• https://codereview.qt-project.org/c/qt/qt5compat/+/760220
• https://codereview.qt-project.org/c/qt/qt5compat/+/771290
• https://codereview.qt-project.org/c/qt/qt5compat/+/774512
• https://codereview.qt-project.org/c/qt/qt5compat/+/774513
• https://codereview.qt-project.org/c/qt/qt5compat/+/774632
• https://www.qt.io/security-advisories?search=CVE-2026-97845

Check your software

Connect an AI agent to the FixLane MCP server or ask the Telegram bot to check what you have installed against incidents with a verified fixed version.