TI-2026-75480 CVE-2026-111694 · GHSA-wg5c-63h4-vxh8
Missing authentication in qKnow exposes user and department data
Priority HIGH 70
qKnow through 2.4.3 contains a missing authentication vulnerability that allows unauthenticated remote attackers to access /flyflow workflow integration endpoints permitted in SecurityConfig.