Signal is active with 2 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
Apache Artemis before version 2.52.0 is affected by an authentication bypass flaw which allows reading all messages exchanged via the broker and injection of new message ( CVE-2026-27446 https://www.cve.org/CVERecord ). Since KNIME Business Hub uses Apache Artemis it is also affected by the issue. However, since Apache Artemis is not exposed to the outside it requires at least normal user privileges and the ability to execute workflows in an executor. Such a user can install and register a federated mirror without authentication to the original Apache Artemis instance and thereby read all internal messages and inject new messages. The issue affects all versions of KNIME Business Hub. A fixed version of Apache Artemis is shipped with versions 1.18.0, 1.17.4, and 1.16.3. We recommend updating to a fixed version as soon as possible since no workaround is known.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
NONE
CVE-2026-4649 Authentication Bypass in Apache Artemis Affecting KNIME Business Hub Versions https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-4649
Post summary
The text announces an authentication bypass vulnerability in Apache Artemis impacting KNIME Business Hub, but provides only minimal technical details without evidence of exploitation or mitigation.
CVE-2026-4649 Apache Artemis before version 2.52.0 is affected by an authentication bypass flaw which allows reading all messages exchanged via the broker and injection of new messag… https://www.cve.org/CVERecord?id=CVE-2026-4649
Post summary
The text announces a CVE for Apache Artemis indicating an authentication bypass flaw that allows reading and injecting messages, with no mention of PoC, exploit, or patch.