Veille CVE

Lundi 19 octobre 2026

2 CVE

  1. CVE-2026-8168 7.1 Élevée

    qt

    Uncontrolled recursion in the SVG parser and renderer of the Qt SVG module (QtSvg) in Qt Group Qt allows attackers to cause a denial of service (application crash via stack exhaustion) via a crafted SVG file with deeply nested elements.

  2. CVE-2026-112146 7.4 Élevée

    D-Link E15 · D-Link M32 · D-Link R15 · D-Link R32

    A vulnerability was detected in D-Link E15, M32, R15 and R32. This issue affects some unknown processing of the file /etc/emDaemon/passwd of the component MQTT Broker. The manipulation results in hard-coded credentials. It is possible to launch the attack remotely. The exploit is now public and may be used.