qiantongtech CVE debriefs

These pages are published after PatchSiren validates generated defensive summaries against stored public CVE and source evidence.

MEDIUM qiantongtech CVE published 2026-10-16

CVE-2026-111694

CVE-2026-111694 is a missing authentication vulnerability in qKnow through version 2.4.3 that allows unauthenticated remote attackers to access /flyflow workflow integration endpoints permitted in SecurityConfig. Attackers can exploit this vulnerability to enumerate user information and department structure. The vulnerability exists due to a lack of proper authentication mechanisms, potentially leading to [truncated]