CVE-2026-79680CWE-288

CVE-2026-79680

published September 24, 2026

CVSS
4.5
EPSS
0%
Percentile
26.5
In the wild
Unconfirmed
What it is

Authentication bypass vulnerability in the password authentication mechanism of the Qt VNC Server module. An attacker using a specially modified VNC client that violates the RFB protocol can bypass Qt VNC Server's password authentication and gain unauthorized remote access to the shared application, compromising the confidentiality and integrity of the session.

The record
Technical detail
CVSS
4.5 · NONE
CVSS v4.0
4.5 · CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:A/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/E:U/V:D/RE:L
EPSS
0.00342 · 26.5th percentile
Weakness
CWE-288 · Authentication Bypass Using an Alternate Path or Channel
Published
2026-09-24T15:16Z
References (2)
https://codereview.qt-project.org/c/qt/tqtc-qtvncserver/+/759160 · a59d8014-47c4-4630-ab43-e1b13cbe58e3https://wiki.qt.io/List_of_known_vulnerabilities_in_Qt_products#CVE-2026-79680: · a59d8014-47c4-4630-ab43-e1b13cbe58e3
EPSS history
Timeline
  • 26 SEP 03:26Z
    EPSS moved — → 0%
    epss
  • 24 SEP 10:56Z
    Authentication bypass vulnerability in the password authentication mechanism of the Qt VNC Server module
    cvelistv5