{"schema":"vulnpedia.research/1","cve":"CVE-2026-111694","generated":"2026-10-26T13:52:32.101Z","references":[{"url":"https://hackmd.io/@hieuPenguinnn/qknow-flyflow-unauth-user-directory-disclosure","tags":["third-party-advisory","exploit"],"source":"mitre","sourceId":"VulnCheck","modified":"2026-10-16T17:39:49.601Z","origins":[{"source":"mitre","sourceId":"VulnCheck","modified":"2026-10-16T17:39:49.601Z","url":"https://hackmd.io/@hieuPenguinnn/qknow-flyflow-unauth-user-directory-disclosure"},{"source":"mitre","sourceId":"CISA-ADP","modified":"2026-10-21T21:12:49.599Z","url":"https://hackmd.io/@hieuPenguinnn/qknow-flyflow-unauth-user-directory-disclosure"},{"source":"nvd","sourceId":"CVE-2026-111694","modified":"2026-10-21T21:17:55.143","url":"https://hackmd.io/@hieuPenguinnn/qknow-flyflow-unauth-user-directory-disclosure"}]},{"url":"https://github.com/qiantongtech/qKnow/blob/v2.4.3/qknow-framework/qknow-security/src/main/java/tech/qiantong/qknow/security/config/SecurityConfig.java#L133","tags":["technical-description"],"source":"mitre","sourceId":"VulnCheck","modified":"2026-10-16T17:39:49.601Z","origins":[{"source":"mitre","sourceId":"VulnCheck","modified":"2026-10-16T17:39:49.601Z","url":"https://github.com/qiantongtech/qKnow/blob/v2.4.3/qknow-framework/qknow-security/src/main/java/tech/qiantong/qknow/security/config/SecurityConfig.java#L133"},{"source":"nvd","sourceId":"CVE-2026-111694","modified":"2026-10-21T21:17:55.143","url":"https://github.com/qiantongtech/qKnow/blob/v2.4.3/qknow-framework/qknow-security/src/main/java/tech/qiantong/qknow/security/config/SecurityConfig.java#L133"}]},{"url":"https://github.com/qiantongtech/qKnow/blob/v2.4.3/qknow-module-system/qknow-module-system-biz/src/main/java/tech/qiantong/qknow/module/system/controller/admin/flyflow/FlyFlowController.java#L77-L99","tags":["technical-description"],"source":"mitre","sourceId":"VulnCheck","modified":"2026-10-16T17:39:49.601Z","origins":[{"source":"mitre","sourceId":"VulnCheck","modified":"2026-10-16T17:39:49.601Z","url":"https://github.com/qiantongtech/qKnow/blob/v2.4.3/qknow-module-system/qknow-module-system-biz/src/main/java/tech/qiantong/qknow/module/system/controller/admin/flyflow/FlyFlowController.java#L77-L99"},{"source":"nvd","sourceId":"CVE-2026-111694","modified":"2026-10-21T21:17:55.143","url":"https://github.com/qiantongtech/qKnow/blob/v2.4.3/qknow-module-system/qknow-module-system-biz/src/main/java/tech/qiantong/qknow/module/system/controller/admin/flyflow/FlyFlowController.java#L77-L99"}]},{"url":"https://github.com/qiantongtech/qKnow","tags":["product"],"source":"mitre","sourceId":"VulnCheck","modified":"2026-10-16T17:39:49.601Z","origins":[{"source":"mitre","sourceId":"VulnCheck","modified":"2026-10-16T17:39:49.601Z","url":"https://github.com/qiantongtech/qKnow"},{"source":"nvd","sourceId":"CVE-2026-111694","modified":"2026-10-21T21:17:55.143","url":"https://github.com/qiantongtech/qKnow"}]},{"url":"https://www.vulncheck.com/advisories/qknow-through-2.4.3-missing-authentication-via-flyflow-workflow-endpoints","tags":["third-party-advisory"],"source":"mitre","sourceId":"VulnCheck","modified":"2026-10-16T17:39:49.601Z","origins":[{"source":"mitre","sourceId":"VulnCheck","modified":"2026-10-16T17:39:49.601Z","url":"https://www.vulncheck.com/advisories/qknow-through-2.4.3-missing-authentication-via-flyflow-workflow-endpoints"},{"source":"nvd","sourceId":"CVE-2026-111694","modified":"2026-10-21T21:17:55.143","url":"https://www.vulncheck.com/advisories/qknow-through-2.4.3-missing-authentication-via-flyflow-workflow-endpoints"}]},{"source":"euvd","sourceId":"EUVD-2026-102985","url":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-102985","tags":["ADVISORY"],"origins":[{"source":"euvd","sourceId":"EUVD-2026-102985","url":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-102985"}]}],"packages":[],"pocCandidates":[],"cataloguedPoc":[],"vendorStatements":[]}