CVE-2026-115517
Description
Unrestricted network access between execution contexts in KNIME Business Hub before version 1.19.0 allows an authenticated remote user to access open network ports on executors in different execution contexts. This only poses a security issue if the IP address of the attacked executor is know and there are open network ports that provided access without further authentication. By default no network ports are open. However, depending on the running workflows, ports may be opened and provide an attack surface. As a workaround, network policies can be created manually.
Is your site exposed to CVE-2026-115517?
Run a free security scan — no signup, results in seconds.
EPSS — Exploit Prediction
EPSS estimates the probability that this vulnerability will be exploited in the wild within the next 30 days. A higher score means more likely to be exploited.
Weakness Type (CWE)
References
Other References
Frequently Asked Questions
What is CVE-2026-115517? +
How do I check if I'm vulnerable to CVE-2026-115517? +
Related Vulnerabilities
In Grafana, the wrong permission is applied to the alert rule write API endpoint, allowing users with permission to write …
A control logic defect in a specific built-in webpage of Kids Mode allows users to view local gallery photos directly …
When using the Grafana Snowflake Datasource Plugin, if Oauth passthrough is enabled on the datasource, and multiple users are using …
When using the Grafana Databricks Datasource Plugin, if Oauth passthrough is enabled on the datasource, and multiple users are using …
Enabled IP Forwarding feature in B&R Automation Runtime versions before 6.0.2 may allow remote attack-ers to compromise network security by …
An improper isolation or compartmentalization vulnerability has been reported to affect Notes Station 3. If a local attacker gains an …