CVE-2025-14575CWE-427

CVE-2025-14575

published May 19, 2026

CVSS
1.8
EPSS
0%
Percentile
0.5
In the wild
Unconfirmed
What it is

An Uncontrolled Search Path Element vulnerability in the OpenSSL TLS backend of Qt Network (qtbase) in Qt Qt Framework (Unix) allows a local attacker to load a rogue CA certificate as a trusted system authority via a crafted certificate file placed in the application's working directory.

The record
Technical detail
CVSS
1.8 · NONE
CVSS v4.0
Not supplied
EPSS
0.00092 · 0.5th percentile
Weakness
CWE-427 · Uncontrolled Search Path Element
Published
2026-05-19T18:16Z
References (1)
https://codereview.qt-project.org/c/qt/qtbase/+/642967 · a59d8014-47c4-4630-ab43-e1b13cbe58e3
EPSS history
Timeline
  • 19 MAY 13:01Z
    Uncontrolled Search Path Element in Qt Network OpenSSL TLS backend allows rogue CA certificate loading
    cvelistv5