Opencti-platform Opencti vulnerabilities

• opencti-platform opencti OpenCTI: Synchronizer SSRF: stream fetch has no URL validation CVE-2026-76820 7.7 HighSeptember 15, 2026
• opencti-platform opencti OpenCTI: User-Controlled ReDoS in JSON Ingestion Mapper CVE-2026-76821 7.1 HighSeptember 15, 2026
• citeum opencti OpenCTI: Elasticsearch Painless Script Injection via GraphQL `script` filter operator allows authenticated user to exfiltrate data and cause DoS CVE-2026-35211 Fix available 6.5 MediumJuly 8, 2026
• citeum opencti OpenCTI: Authorization Bypass via `synchronized-upsert` HTTP Header Injection CVE-2026-35210 Fix available 7.1 HighJuly 8, 2026
• citeum opencti OpenCTI has XSS in the rendering of email-message observable body data CVE-2026-35212 Fix available 5.3 MediumJune 2, 2026
• citeum opencti OpenCTI: Privilege escalation via graphQL API abusable by organization admins, due to incorrect ACL on userEdit relationAdd CVE-2026-44730 Fix available 7.2 HighMay 26, 2026
• citeum opencti OpenCTI privilege escalation and unauthenticated access via default admin account CVE-2026-27960 Public exploitFix available 9.8 CriticalMay 5, 2026
• citeum opencti OpenCTI affected by RCE via notifier template CVE-2026-39980 Public exploitFix available 9.1 CriticalApril 9, 2026
• citeum opencti OpenCTI's GraphQL Mutations Allow Deletion of Unrelated Entities CVE-2026-21886 Fix available 6.5 MediumMarch 17, 2026
• citeum opencti OpenCTI has a Semi-Blind SSRF via Unvalidated External URL in Data Ingestion Feature CVE-2026-21887 Fix available 7.7 HighMarch 12, 2026
• citeum opencti OpenCTI 3.3.1 - Cross Site Scripting CVE-2020-37044 5.1 MediumJanuary 30, 2026
• citeum opencti OpenCTI 3.3.1 - Directory Traversal CVE-2020-37041 7.1 HighJanuary 30, 2026
• citeum opencti Open Redirect in OpenCTI's SAML Authentication Flow CVE-2025-61782 Fix available 5.4 MediumJanuary 7, 2026
• citeum opencti GraphQL IDOR allows authenticated user to delete workspace content of other users CVE-2025-61781 Fix available 7.1 HighJanuary 5, 2026
• citeum opencti OpenCTI's GraphQL IDOR enables authenticated users to modify or delete notifications of other users CVE-2025-46732 Fix available 5.4 MediumJuly 18, 2025
• citeum opencti OpenCTI vulnerable to Denial of Service through web hook CVE-2025-26621 Fix available 7.6 HighMay 19, 2025
• citeum opencti OpenCTI has remote code execution and sensitive secrets exposed through web hook CVE-2025-24977 Fix available 9.1 CriticalMay 5, 2025
• citeum opencti OpenCTI bypass of protected attribute update CVE-2025-24887 Fix available 6.3 MediumApril 30, 2025
• citeum opencti OpenCTI leaks support information due to inadequate access control CVE-2024-45805 Fix available 4.3 MediumDecember 26, 2024
• citeum opencti OpenCTI's lack of Rate Limit lead to OTP brute forcing CVE-2024-45404 Fix available 8.1 HighDecember 11, 2024
• citeum opencti OpenCTI May Bypass Introspection Restriction CVE-2024-37155 Fix available 6.5 MediumNovember 18, 2024
• citeum opencti OpenCTI Authenticated Privilege Escalation CVE-2024-26139 Fix available 8.3 HighMay 23, 2024