LOW 2.1 NVD

CVE-2026-115519

Missing security attributes on sensitive cookies in KNIME Business Hub before version 1.19.0 allow an unauthenticated remote attacker to compromise user session

Missing security attributes on sensitive cookies in KNIME Business Hub before version 1.19.0 allow an unauthenticated remote attacker to compromise user sessions if other security issues such as a cross-site scripting vulnerability or a man-in-the-middle attack are present. A workaround is not possible.

References

https://www.knime.com/security/advisories

Published: 2026-10-22 · Source: NVD · Feed updated: 2026-10-22

This low severity vulnerability with a CVSS score of 2.1 was published on 2026-10-22 via NVD.

vulnfeed aggregates 17279 vulnerabilities from NVD, CISA KEV, Ubuntu, Debian, Red Hat, Kubernetes, Exploit-DB, OSS-Security, GitHub and OpenStack — updated every 4 hours.