Skip to content
OpenAdvisories

Vendor

OpenCTI-Platform

20 known vulnerabilities.

Products

opencti 20
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Critical 9.8
    CVE-2026-27960 Public exploit

    OpenCTI privilege escalation and unauthenticated access via default admin account

    OpenCTI is an open source platform for managing cyber threat intelligence knowledge and observables. In versions 6.6.0 through 6.9.12, there is a privilege escalation vulnerability that can be exploited by unauthenticated attackers to query the API as any exi…

    OpenCTI-Platform opencti pycti PyPI
  • Critical 9.1
    CVE-2026-39980 Public exploit

    OpenCTI affected by RCE via notifier template

    OpenCTI is an open source platform for managing cyber threat intelligence knowledge and observables. Prior to 6.9.5, the safeEjs.ts file does not properly sanitize EJS templates. Users with the Manage customization capability can run arbitrary JavaScript in t…

    OpenCTI-Platform opencti pycti PyPI