# Security advisory: CVE-2026-19248: Unbounded recursion vulnerability in the QDomNode destructor of Qt XML impacts Qt

DevFeed: [Security advisory: CVE-2026-19248: Unbounded recursion vulnerability in the QDomNode destructor of Qt XML impacts Qt](<https://devfeed.tech/articles/security-advisory-cve-2026-19248-unbounded-recursion-vulnerability-in-the-qdomnode-destructor-of-qt-xml-impacts-qt-47168.md>)

Original publisher: [Read original article](<https://www.qt.io/blog/security-advisory-cve-2026-19248>)

Author: Tero Pelkonen

Published: 2026-09-11T10:33:19Z

Content type: release

Language: en

Sources: [Qt Blog](<https://devfeed.tech/sources/qt-blog.md>)

Topics: [Qt](<https://devfeed.tech/topics/qt.md>), [vulnerability](<https://devfeed.tech/topics/vulnerability.md>), [Security](<https://devfeed.tech/topics/security.md>), [XML](<https://devfeed.tech/topics/xml.md>)

Tags: [2026](<https://devfeed.tech/tags/2026.md>), [article](<https://devfeed.tech/tags/article.md>), [cve](<https://devfeed.tech/tags/cve.md>), [qt](<https://devfeed.tech/tags/qt.md>), [security](<https://devfeed.tech/tags/security.md>), [security-advisory](<https://devfeed.tech/tags/security-advisory.md>), [vulnerability](<https://devfeed.tech/tags/vulnerability.md>), [xml](<https://devfeed.tech/tags/xml.md>)

## AI overview

A security advisory reports that unbounded destructor recursion in Qt XML's QDomNode destructor has been discovered and assigned CVE-2026-19248.

## Source excerpt

Unbounded destructor recursion in the QDomNode destructor of Qt XML has been discovered and has been assigned the CVE id CVE-2026-19248.