CVE-2026-115517

The record

Unrestricted network access between execution contexts in KNIME Business Hub before version 1.19.0 allows an authenticated remote user to access open network ports on executors in different execution contexts. This only poses a security issue if the IP address of the attacked executor is know and there are open network ports that provided access without further authentication. By default no network ports are open. However, depending on the running workflows, ports may be opened and provide an attack surface. As a workaround, network policies can be created manually.

Affected packages

Related vulnerabilities

• CVE-2026-119408 n8n before 2.42.6, 2.43.x before 2.43.3, and 3.x before 3.0.1 contains a remote code… CWE-653
• CVE-2026-15366 A control logic defect in a specific built-in webpage of Kids Mode allows users to view… CWE-653
• CVE-2026-62246 Kamaji is the Hosted Control Plane Manager for Kubernetes. CWE-653
• CVE-2026-65635 Improper Isolation or Compartmentalization vulnerability in malach-it boruta… CWE-653
• CVE-2026-63071 Improper Isolation or Compartmentalization vulnerability in Apache Syncope. CWE-653
• CVE-2026-53421 Improper Isolation or Compartmentalization vulnerability in Apache Syncope. CWE-653
• CVE-2026-53405 Improper Isolation or Compartmentalization vulnerability in Apache Syncope. CWE-653
• CVE-2026-15738 Incorrect behavior order in the Gateway API listener-rule generation in Amazon AWS Load… CWE-653