Skip to content
OpenAdvisories

Vendor

OpenCTI-Platform

20 known vulnerabilities.

Products

opencti 20
All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • Critical 9.8
    CVE-2026-27960 Public exploit Scanner template

    OpenCTI privilege escalation and unauthenticated access via default admin account

    OpenCTI is an open source platform for managing cyber threat intelligence knowledge and observables. In versions 6.6.0 through 6.9.12, there is a privilege escalation vulnerability that can be exploited by unauthenticated attackers to query the API as any exi…

    OpenCTI-Platform opencti pycti PyPI
  • Critical 9.1
    CVE-2026-39980 Public exploit

    OpenCTI affected by RCE via notifier template

    OpenCTI is an open source platform for managing cyber threat intelligence knowledge and observables. Prior to 6.9.5, the safeEjs.ts file does not properly sanitize EJS templates. Users with the Manage customization capability can run arbitrary JavaScript in t…

    OpenCTI-Platform opencti pycti PyPI
  • Critical 9.1
    CVE-2025-24977

    OpenCTI has remote code execution and sensitive secrets exposed through web hook

    OpenCTI is an open cyber threat intelligence (CTI) platform. Prior to version 6.4.11 any user with the capability `manage customizations` can execute commands on the underlying infrastructure where OpenCTI is hosted and can access internal server side secrets…

    OpenCTI-Platform opencti pycti PyPI