Vulnerability feed

CVE and vendor PSIRT advisories from 13 sources, last 30 days. Updated hourly, last run Oct 26 02:05 UTC

Critical in the last 24 hours

1603 in 30 days

Newly known exploited

In the last 24 hours, CISA KEV and vendor reports

Sources checked

Every hour, see the list

New in the last 24 hours

144-76% vs 7-day avg of 597

2 critical, 38 high, 59 medium, 25 low

Expand	Severity	Score	Advisory	Title	Source	Published
	Medium	4.8	CVE-2026-115657	When used as an executor in either KNIME Server or KNIME Business Hub, KNIME Analytics Platform LTS versions before 5.8.4 log configured credentials of proxies during startup Apache, KNIMEApache Tomcat, KNIME Business Hub, KNIME Analytics Platform, KNIME Server, Apache Artemis	NVD	Oct 23 09:17 UTC
CVE-2026-115657When used as an executor in either KNIME Server or KNIME Business Hub, KNIME Analytics Platform LTS versions before 5.8.4 log configured credentials of proxies during startup Executive summary This advisory page from KNIME covers many security issues across KNIME Analytics Platform, KNIME Server, and KNIME Business Hub, including the newest entries published in October 2026 and many older ones. The most recent items include credential logging in KNIME Analytics Platform used as an executor (CVSS v4.0 4.8, Medium) and several Medium issues in KNIME Business Hub, which the vendor says are fixed in version 1.19.0. The vendor recommends updating to the fixed versions listed for each issue. Technical summary The advisory lists many issues with different classes, including credential logging, missing cookie attributes, missing authorization checks, CSRF protection bypass via a forged X-Forwarded-Host header, excessive resource allocation, open redirect, and cross-site scripting. For CVE-2026-115657, KNIME Analytics Platform before 5.8.4 and 5.12.0 logs configured proxy credentials at startup when used as an executor, and an attacker with access to log files could reuse them; the advisory says there is no risk without an authenticated proxy, and fixed versions are LTS 5.8.4 and 5.12.0. For the KNIME Business Hub items, the fixed version is 1.19.0 for most CVEs, with workarounds stated for some (such as network policies or removing links without login) and not possible for others. For CVE-2026-4649, the advisory states Apache Artemis is affected, the fix is in Business Hub 1.18.0, 1.17.4, 1.16.3, and 1.15.2, and no workaround is known. Where the advisory does not state a workaround or detection guidance, this is not stated. Detection guidance is not stated in the advisory. Summaries are generated by AI from the linked advisory text. Confirm versions and fixes at the source. Dropped extracted product not named in the source: Summarized from knime.com/security/advisories Impact if exploited ConfidentialityNone IntegrityNone AvailabilityNone How it is exploited Attack vector Local Attack complexity Low Attack requirements None Privileges required Low User interaction None CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:N/SC:L/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X Affects Apache KNIME Apache Tomcat KNIME Business Hub KNIME Analytics Platform KNIME Server Apache Artemis NIST National Vulnerability DatabasePublished Oct 23, 2026 09:17 UTC Read the advisory
	Unknown	n/a	CVE-2026-93446	Incomplete cleanup vulnerability in Apache Tomcat could cause TLS 1.3 connections to fail intermittently. This issue affects Apache Tomcat: from 11.0.0-M21 through 11.0.26,... ApacheApache Tomcat	NVD	Oct 20 14:17 UTC
CVE-2026-93446Incomplete cleanup vulnerability in Apache Tomcat could cause TLS 1.3 connections to fail intermittently. This issue affects Apache Tomcat: from 11.0.0-M21 through 11.0.26,... From the advisory Incomplete cleanup vulnerability in Apache Tomcat could cause TLS 1.3 connections to fail intermittently. This issue affects Apache Tomcat: from 11.0.0-M21 through 11.0.26, from 10.1.25 through 10.1.60, from 9.0.90 through 9.0.122. Users are recommended to upgrade to version 11.0.27, 10.1.61 or 9.0.123, which fix the issue. Score No CVSS score published. Affects Apache Apache Tomcat NIST National Vulnerability DatabasePublished Oct 20, 2026 14:17 UTC Read the advisory
	Unknown	n/a	CVE-2026-88041	Incomplete cleanup vulnerability in Apache Tomcat allowed an trailer information from a previous request to leak into a subsequent request. This issue affects Apache Tomcat:... ApacheApache Tomcat	NVD	Oct 20 14:17 UTC
CVE-2026-88041Incomplete cleanup vulnerability in Apache Tomcat allowed an trailer information from a previous request to leak into a subsequent request. This issue affects Apache Tomcat:... From the advisory Incomplete cleanup vulnerability in Apache Tomcat allowed an trailer information from a previous request to leak into a subsequent request. This issue affects Apache Tomcat: from 11.0.0-M23 through 11.0.26, from 10.1.27 through 10.1.60, from 9.0.92 through 9.0.122. Users are recommended to upgrade to version 11.0.27, 10.1.61 or 9.0.123, which fix the issue. Score No CVSS score published. Affects Apache Apache Tomcat NIST National Vulnerability DatabasePublished Oct 20, 2026 14:17 UTC Read the advisory
	Unknown	n/a	CVE-2026-80353	Time-of-check time-of-use (TOCTOU) race condition vulnerability in Apache Tomcat when creating unix domain sockets for the APR/Native connector allows an unauthorised local... ApacheApache Tomcat	NVD	Oct 20 14:17 UTC
CVE-2026-80353Time-of-check time-of-use (TOCTOU) race condition vulnerability in Apache Tomcat when creating unix domain sockets for the APR/Native connector allows an unauthorised local... From the advisory Time-of-check time-of-use (TOCTOU) race condition vulnerability in Apache Tomcat when creating unix domain sockets for the APR/Native connector allows an unauthorised local user to access the unix domain socket. The fix for CVE-2026-65183 only addressed the NIO connector. It did not address the same issue in the APR/Native connector. This issue affects Apache Tomcat: from 9.0.47 through 9.0.122. Users are recommended to upgrade to version 9.0.123, which fixes the issue. Score No CVSS score published. Affects Apache Apache Tomcat NIST National Vulnerability DatabasePublished Oct 20, 2026 14:17 UTC Read the advisory
	Unknown	n/a	CVE-2026-74049	Execution After Redirect (EAR) vulnerability in Apache Tomcat. This issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.26, from 10.1.0-M1 through 10.1.60, from... ApacheApache Tomcat	NVD	Oct 20 14:17 UTC
CVE-2026-74049Execution After Redirect (EAR) vulnerability in Apache Tomcat. This issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.26, from 10.1.0-M1 through 10.1.60, from... From the advisory Execution After Redirect (EAR) vulnerability in Apache Tomcat. This issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.26, from 10.1.0-M1 through 10.1.60, from 9.0.0.M1 through 9.0.122. The following versions were EOL at the time the CVE was created but are known to be affected: from 8.5.0 through 8.5.100, from 7.0.0 through 7.0.109. Other unsupported versions may also be affected. Users are recommended to upgrade to version 11.0.27, 10.1.61, 9.0.123, which fixes the issue. Score No CVSS score published. Affects Apache Apache Tomcat NIST National Vulnerability DatabasePublished Oct 20, 2026 14:17 UTC Read the advisory
	Unknown	n/a	CVE-2026-74048	Not Failing Securely ('Failing Open') vulnerability in Apache Tomcat ApacheApache Tomcat	NVD	Oct 20 14:17 UTC
CVE-2026-74048Not Failing Securely ('Failing Open') vulnerability in Apache Tomcat From the advisory Not Failing Securely ('Failing Open') vulnerability in Apache Tomcat. If the OpenSSLLifecycleListener is configured to use FIPS mode but FIPS activation fails, Tomcat logs and error but continues to use JSSE in non-FIPS mode with the provided configuration. This issue affects Apache Tomcat: from 11.0.0-M14 through 11.0.26, from 10.1.22 through 10.1.60, from 9.0.92 through 9.0.122. Users are recommended to upgrade to version 11.0.27, 10.1.61 or 9.0.123, which fix the issue. Score No CVSS score published. Affects Apache Apache Tomcat NIST National Vulnerability DatabasePublished Oct 20, 2026 14:17 UTC Read the advisory
	Critical	9.1	CVE-2026-103119	Buffer under-read vulnerability in Apache Tomcat meant that a large non-blocking write could result in the response body being split between the current request and the next... ApacheApache Tomcat	NVD	Oct 20 14:16 UTC
CVE-2026-103119Buffer under-read vulnerability in Apache Tomcat meant that a large non-blocking write could result in the response body being split between the current request and the next... From the advisory Buffer under-read vulnerability in Apache Tomcat meant that a large non-blocking write could result in the response body being split between the current request and the next request received on that connection leading most likely to failure of the second request and possibly leakage of data from the first response to the second. This issue affects Apache Tomcat: from 11.0.0-M25 through 11.0.26. Users are recommended to upgrade to version 11.0.27, which fixes the issue. Impact if exploited ConfidentialityHigh IntegrityNone AvailabilityHigh How it is exploited Attack vector Network Attack complexity Low Privileges required None User interaction None Scope Unchanged CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H Affects Apache Apache Tomcat NIST National Vulnerability DatabasePublished Oct 20, 2026 14:16 UTC Read the advisory
	Critical	9.1	CVE-2026-101356	Incorrect object recycling and re-use vulnerability in Apache Tomcat affecting HTTP/2 processing of asynchronous servlets can trigger request and/or response mix-up between... ApacheApache Tomcat	NVD	Oct 20 14:16 UTC
CVE-2026-101356Incorrect object recycling and re-use vulnerability in Apache Tomcat affecting HTTP/2 processing of asynchronous servlets can trigger request and/or response mix-up between... From the advisory Incorrect object recycling and re-use vulnerability in Apache Tomcat affecting HTTP/2 processing of asynchronous servlets can trigger request and/or response mix-up between users. This issue affects Apache Tomcat: from 11.0.22 through 11.0.26, from 10.1.55 through 10.1.60, from 9.0.118 through 9.0.122. Users are recommended to upgrade to version 11.0.27, 10.1.61 or 9.0.123, which fixes the issue. Impact if exploited ConfidentialityHigh IntegrityNone AvailabilityHigh How it is exploited Attack vector Network Attack complexity Low Privileges required None User interaction None Scope Unchanged CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H Affects Apache Apache Tomcat NIST National Vulnerability DatabasePublished Oct 20, 2026 14:16 UTC Read the advisory
	Critical	9.1	CVE-2026-101296	A missing critical step in authentication vulnerability in Apache Tomcat when the JNDI realm was configured with with a non GSSAPI SASL authentication mechanism allowed... ApacheApache Tomcat	NVD	Oct 20 14:16 UTC
CVE-2026-101296A missing critical step in authentication vulnerability in Apache Tomcat when the JNDI realm was configured with with a non GSSAPI SASL authentication mechanism allowed... From the advisory A missing critical step in authentication vulnerability in Apache Tomcat when the JNDI realm was configured with with a non GSSAPI SASL authentication mechanism allowed attackers to authenticate without providing the correct password. This issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.26, from 10.1.0-M1 through 10.1.60, from 9.0.0.M1 through 9.0.122. The following versions were EOL at the time the CVE was created but are known to be affected: from 8.5.0 through 8.5.100, from 7.0.0 through 7.0.109. Other unsupported versions may also be affected. Users are recommended to upgrade to version 11.0.27, 10.1.61 or 9.0.123, which fix the issue. Impact if exploited ConfidentialityHigh IntegrityHigh AvailabilityNone How it is exploited Attack vector Network Attack complexity Low Attack requirements Present Privileges required None User interaction None CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X Affects Apache Apache Tomcat NIST National Vulnerability DatabasePublished Oct 20, 2026 14:16 UTC Read the advisory

Example	Finds
	Every word appears somewhere: title, summaries, IDs, vendor, or product
	An exact phrase
	One vendor. product: for a product, vp: for either
	Commas mean any of them, in every field
	Severity: critical, high, medium, low, or unknown
	CVSS score, with >, >=, <, or <=
	A score range
	Known exploited. is:kev works too, and kev:no leaves them out
	One source, by name
	Confidentiality impact: high, low, none, or any (low or high)
	Integrity and availability work the same way
	An advisory or CVE ID, or part of one
	A minus sign leaves out whatever the term matches

Vulnerability feed

Executive summary

Technical summary

Impact if exploited

How it is exploited

Affects

From the advisory

Score

Affects

From the advisory

Score

Affects

From the advisory

Score

Affects

From the advisory

Score

Affects

From the advisory

Score

Affects

From the advisory

Impact if exploited

How it is exploited

Affects

From the advisory

Impact if exploited

How it is exploited

Affects

From the advisory

Impact if exploited

How it is exploited

Affects

Search syntax

Welcome to CVEsee.org

What is CVEsee.org?

Disclaimer

You are leaving CVEsee.org

Install CVEsee