CVE-2026-115517

Unrestricted network access between execution contexts in KNIME Business Hub before version 1.19.0 allows an authenticated remote user to access open network ports on executors in different execution contexts. This only poses a security issue if the IP address of the attacked executor is know and there are open network ports that provided access without further authentication. By default no network ports are open. However, depending on the running workflows, ports may be opened and provide an attack surface. As a workaround, network policies can be created manually.

• CWE-653

• https://www.knime.com/security/advisories

Published

Oct 22, 2026

Last Modified

Oct 22, 2026

Status

Received

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-115496Overly informative error messages in the catalog functionali…6.9
• CVE-2026-1155A vulnerability was found in Totolink LR350 9.3.5u.6369_B202…8.8
• CVE-2026-115502A missing authorization check allows anyone having access to…6.3
• CVE-2026-11551The Branda plugin for WordPress is vulnerable to privilege e…9.8
• CVE-2026-115513OpenCATS before 0.12.0 contains a stored cross-site scriptin…8.7
• CVE-2026-115516An incorrect authorization issue exposes basic account infor…6.9
• CVE-2026-115519Missing security attributes on sensitive cookies in KNIME Bu…2.1
• CVE-2026-11552A vulnerability has been found in SourceCodester Onlne Exami…5.5
• CVE-2026-11553A vulnerability was found in Tenda HG7, HG9 and HG10 3000011…8.8
• CVE-2026-11554A vulnerability was determined in TOTOLINK CP450 4.1.0cu.747…4.3
• CVE-2026-11555A vulnerability was identified in D-Link DGS-1100-08PD 1.00.…7.5
• CVE-2026-11556A security flaw has been discovered in Tenda F451 1.0.0.7/1.…8.8