CVE-2026-115516

✕ Withdrawn — historical dataMEDIUMPre-NVD 6.9
6.9CVSS

An incorrect authorization issue exposes basic account information to unauthorized remote users in KNIME Business Hub SaaS before version 1.19.0. A workaround is not possible.

The same behaviour is present in on-premise KNIME Business Hub installations but it was designed as such in order to foster collaboration in isolated local environments. No information that is not already know within the company is exposed. If required, basic account information can also be turned off via configuration in on-premise installations.

CVSS v3
6.9
EchelonGraph score
Not yet assessedThis CVE record was withdrawn by its numbering authority, so there is no vulnerability to rate.
EPSS PROB
—
EPSS %ILE
—
KEV
—Not applicable: this CVE ID was withdrawn

Published

October 22, 2026

Last Modified

October 22, 2026

References (1)

Frequently asked(4)

What is CVE-2026-115516?
CVE-2026-115516 is a rejected CVE ID: its record was withdrawn on October 23, 2026 and no longer describes a vulnerability. Reason given: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.
When was the CVE record for CVE-2026-115516 published?
The CVE record for CVE-2026-115516 was published on October 22, 2026. EchelonGraph's copy of the record carries a last-modified date of October 22, 2026; the record at its source may have been updated since.
What is the CVSS score of CVE-2026-115516?
CVE-2026-115516 has a CVSS base score of 6.9 (a secondary CVSS source that NVD displays; NVD's own analysis pending).
How do I remediate CVE-2026-115516?
There is nothing to remediate under CVE-2026-115516: it is a rejected (withdrawn) CVE ID and no longer describes a vulnerability.