CyberRota
Back to database

CVE-2025-14576

HIGH · CVSS 7.8 EPSS 0.01% Public Exploit

Source: NVD + CISA KEV + EPSS · Published: 2026-04-30 · Last synced: 2026-05-30

CyberRota Analysis

Detaylı analiz gerekiyor.

Public Exploit Signal

A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.

Detected Signals
code execution

Note: these links are listed for security research and verification purposes only.

CVE
CVE-2025-14576
Severity
HIGH
CVSS
7.8
EPSS
0.01%
Java

Original NVD Description

Insufficient validation of node IDs in Qt SVG module allows arbitrary QML/JavaScript code injection when loading malicious SVG files through the VectorImage component in Qt Quick. While QML execution is typically more restricted than native code execution, this could still lead to denial of service, information disclosure, or other impacts depending on the application's privilege level and data access.