CVE-2026-115519

Vulnerability Description

Missing security attributes on sensitive cookies in KNIME Business Hub before version 1.19.0 allow an unauthenticated remote attacker to compromise user sessions if other security issues such as a cross-site scripting vulnerability or a man-in-the-middle attack are present. A workaround is not possible.

Related Weaknesses (CWE)

CWE-614 CWE-1004

References

https://www.knime.com/security/advisories

FAQ

What is CVE-2026-115519?

CVE-2026-115519 is a documented vulnerability. Missing security attributes on sensitive cookies in KNIME Business Hub before version 1.19.0 allow an unauthenticated remote attacker to compromise user sessions if other security issues such as a cro...

How severe is CVE-2026-115519?

CVSS scoring is not yet available for CVE-2026-115519. Check NVD for updates.

Is there a patch for CVE-2026-115519?

Check the references section above for vendor advisories and patch information. Review vendor security bulletins for remediation guidance.