CVE-2026-115496

Vulnerability Description

Overly informative error messages in the catalog functionality of KNIME Business Hub prior to version 1.18.5 may allow an authenticated remote attacker to see workflow names if their ID is known. A workaround is not possible.

Related Weaknesses (CWE)

CWE-209

References

https://www.knime.com/security/advisories

FAQ

What is CVE-2026-115496?

CVE-2026-115496 is a documented vulnerability. Overly informative error messages in the catalog functionality of KNIME Business Hub prior to version 1.18.5 may allow an authenticated remote attacker to see workflow names if their ID is known. A wo...

How severe is CVE-2026-115496?

CVSS scoring is not yet available for CVE-2026-115496. Check NVD for updates.

Is there a patch for CVE-2026-115496?

Check the references section above for vendor advisories and patch information. Review vendor security bulletins for remediation guidance.