A flaw was found in the Qt VNC Server module. A remote attacker, by using a specially modified VNC client that violates the Remote Framebuffer (RFB) protocol, can bypass the password authentication mechanism. This allows the attacker to gain unauthorized remote access to the shared application, compromising the confidentiality and integrity of the session.
Last checked: 2026-09-24 21:23 UTC
No exploitation evidence · CISA Coordinator (Assessed 2026-09-24 12:17 UTC)
Fix evidence last checked: 2026-09-25 10:52 UTC