Is CVE-2026-19795 being exploited?

No public exploit is currently tracked.

How severe is CVE-2026-19795?

CVE-2026-19795 has a CVSS v3 severity of MEDIUM (6.2).

Back

CVE-2026-19795

Description

IBM Qiskit SDK 2.1.0 through 2.5.1 could allow a local attacker to cause a denial of service due to improper handling of a specially crafted object during deserialization. A malicious QPY payload can trigger a segmentation fault, causing the application to crash when deserializing untrusted input.