[ CVE-2026-115519 · Published 22 Oct 2026 ]
Vulnerability in KNIME Business Hub
CVSS 2.1
No fix listed yet
[ Description ]Official description
Missing security attributes on sensitive cookies in KNIME Business Hub before version 1.19.0 allow an unauthenticated remote attacker to compromise user sessions if other security issues such as a cross-site scripting vulnerability or a man-in-the-middle attack are present. A workaround is not possible.
[ Fixes ]Fixes and patches
No fix or interim patch is linked from our sources yet. Check the vendor references below and limit exposure of affected systems until a fix is available.