https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T07:06:05.265251+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-339984 EUVD-2026-339984 2026-10-03T07:06:05.353788+00:00 EUVD-2026-339984 https://cve.radiocsirt.org/vuln/fkie_cve-2026-15037 fkie_cve-2026-15037 2026-10-03T07:06:05.353826+00:00

Improper output neutralization (XML injection) in QDom comment, CDATA, and processing-instruction serialization in Qt XML from 4.0.0 through 6.11 allows untrusted text serialized by an application into those nodes to inject arbitrary XML markup, because the node terminators are not escaped under the default InvalidDataPolicy (AcceptInvalidChars). Fixed in Qt 6.12.

 https://cve.radiocsirt.org/vuln/ghsa-7xx4-xq65-r6v3 GHSA-7xx4-xq65-r6v3 2026-10-03T07:06:05.353859+00:00

Improper output neutralization (XML injection) in QDom comment, CDATA, and processing-instruction serialization in Qt XML from 4.0.0 through 6.11 allows untrusted text serialized by an application into those nodes to inject arbitrary XML markup, because the node terminators are not escaped under the default InvalidDataPolicy (AcceptInvalidChars). Fixed in Qt 6.12.

 https://cve.radiocsirt.org/vuln/msrc_cve-2026-15037 msrc_CVE-2026-15037 — XML injection vulnerability in QDom comment, CDATA and processing-instruction serialization 2026-10-03T07:06:05.353878+00:00 msrc_CVE-2026-15037 https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-15037 UBUNTU-CVE-2026-15037 2026-10-03T07:06:05.353895+00:00

Affected: Ubuntu:14.04:LTS: qt4-x11, Ubuntu:16.04:LTS: qt4-x11, Ubuntu:Pro:16.04:LTS: qtbase-opensource-src, Ubuntu:Pro:18.04:LTS: qtbase-opensource-src, Ubuntu:18.04:LTS: qt4-x11, Ubuntu:Pro:20.04:LTS: qtbase-opensource-src, Ubuntu:22.04:LTS: qt6-base, Ubuntu:Pro:22.04:LTS: qtbase-opensource-src, Ubuntu:24.04:LTS: qt6-base, Ubuntu:Pro:24.04:LTS: qtbase-opensource-src and 2 more

Improper output neutralization (XML injection) in QDom comment, CDATA, and processing-instruction serialization in Qt XML from 4.0.0 through 6.11 allows untrusted text serialized by an application into those nodes to inject arbitrary XML markup, because the node terminators are not escaped under the default InvalidDataPolicy (AcceptInvalidChars). Fixed in Qt 6.12.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-2500 WID-SEC-W-2026-2500 — QT: Schwachstelle ermöglicht Manipulation von Dateien 2026-10-03T07:06:05.353933+00:00

Ein entfernter, anonymer Angreifer kann eine Schwachstelle in QT ausnutzen, um Dateien zu manipulieren.