When unexplained things like this happen, you most likely have a MIDI device in your system that sends rogue MIDI CCs. Try disconnecting all devices one after another to see which might be causing this. There are also some MIDI keyboards that send additional CC messages.
Make sure all your MIDI keyboard sends is note name and velocity.
Kontakt's automation section shows you which CCs are coming in, so it should allow you to trace the CC that's responsible.
Capsule's Controller Table shows you which CC is assigned to which function.