CVE-2022-26146

MEDIUM 5.4CVE-2022-26146 · Published 26/02/2022 · updated 17/06/2026

In short

CVE-2022-26146 is a MEDIUM (CVSS 5.4) vulnerability affecting qtest (tricentis).
Chance of exploitation in the next 30 days (EPSS): 0.46%, higher than 39.8% of all vulnerabilities.
Fix: update to 10.4 or later.

Package	Affected versions	Patched versions
qtest tricentis	`< 10.4`	`10.4`

Tricentis qTest before 10.4 allows stored XSS by an authenticated attacker.

Running one of these products? Scan your site to see whether it exposes a vulnerable version.