EUVD-2026-108219

A flaw in the cross-site request forgery CSRF prevention of KNIME Business Hub prior to version 1.19.0 allows an authenticated attacker to perform a CSRF attack with passive user interaction. This means the state of a resource could be changed without the user noticing. As a workaround, an API...

CVE-2026-115494

A flaw in the cross-site request forgery CSRF prevention of KNIME Business Hub prior to version 1.19.0 allows an authenticated attacker to perform a CSRF attack with passive user interaction. This means the state of a resource could be changed without the user noticing. As a workaround, an API...

CVE-2026-115494

A flaw in the cross-site request forgery (CSRF) prevention mechanism of KNIME Business Hub prior to version 1.19.0 allows an authenticated attacker to perform a CSRF attack with passive user interaction . The vulnerability is triggered by a forged X-Forwarded-Host header, which could allow an att...