Skip to content
Every CVE
Browse
Docs
Sources
Guide
Search
/
Get
API key
Every CVE
Vendors
Qgis
Qgis
Qgis Qgis vulnerabilities
qgis
QGIS: Stored XSS in WFS3 getFeatures HTML page via unescaped feature attribute values
CVE-2026-104140
Fix available
6.1
Medium
October 12, 2026
qgis
QGIS had validated RCE and Repository Takeover via GitHub Actions
CVE-2026-24480
Public exploit
8.7
High
January 27, 2026
esc
Pages
All vulnerabilities
Browse
Docs
Sources
Guide
Get API key
Move
Enter
Open