CVE-2026-19248

QDomDocument XML parsing is vulnerable to a remotely-triggerable denial-of-service crash when processing untrusted input.

  • Published Sep 16, 2026
  • CVSS 7.1 high
  • 0.4% chance of exploitation in the next 30 days (EPSS)

Affected software

CVE-2026-19248 at the National Vulnerability Database