Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

opencti — Vulnerabilities & Security Advisories 22

All 22 CVE vulnerabilities found in opencti, with AI-generated Chinese analysis, references, and POCs.

This page aggregates known security vulnerabilities affecting the OpenCTI threat intelligence platform, categorized by specific weakness types and relevant security tags. It compiles a chronological record of reported flaws ranging from early releases to the most recent versions, covering issues such as authentication bypasses, privilege escalation vectors, and data exposure risks identified over the past several years. Visitors can utilize this resource to track the vendor's official security advisories, analyze the prevalence of specific vulnerability classes within the platform, or review the complete historical timeline of security incidents associated with OpenCTI. The collection serves as a centralized reference for security professionals seeking to understand the evolving threat landscape surrounding this critical infrastructure component without relying on fragmented sources. By organizing data according to standardized classification systems, the page enables efficient filtering and comparison of risk factors across different software versions. Users gain immediate access to structured information detailing the nature of each defect, its potential impact on system integrity, and the corresponding remediation steps provided by the development team. This comprehensive overview supports proactive defense strategies by highlighting recurring patterns in the platform's security posture and facilitating informed decision-making regarding patch management and system hardening efforts for organizations deploying OpenCTI in their operational environments.

Vendor: OpenCTI-Platform

CVE ID Title CVSS Severity Published
CVE-2026-76820 OpenCTI: Synchronizer SSRF: stream fetch has no URL validation CWE-918 7.7 High 2026-09-15
CVE-2026-76821 OpenCTI: User-Controlled ReDoS in JSON Ingestion Mapper CWE-400 7.1 High 2026-09-15
CVE-2026-35211 OpenCTI: Elasticsearch Painless Script Injection via GraphQL `script` filter operator allows authenticated user to exfiltrate data and cause DoS CWE-94 6.5 Medium 2026-07-08
CVE-2026-35210 OpenCTI: Authorization Bypass via `synchronized-upsert` HTTP Header Injection CWE-639 7.1 High 2026-07-08
CVE-2026-35212 OpenCTI has XSS in the rendering of email-message observable body data CWE-79 - - 2026-06-02
CVE-2026-44730 OpenCTI: Privilege escalation via graphQL API abusable by organization admins, due to incorrect ACL on userEdit relationAdd CWE-284 7.2 High 2026-05-26
CVE-2026-27960 OpenCTI privilege escalation and unauthenticated access via default admin account CWE-287 9.8 Critical 2026-05-05
CVE-2026-39980 OpenCTI affected by RCE via notifier template CWE-1336 9.1 Critical 2026-04-09
CVE-2026-21886 OpenCTI's GraphQL Mutations Allow Deletion of Unrelated Entities CWE-285 6.5 Medium 2026-03-17
CVE-2026-21887 OpenCTI has a Semi-Blind SSRF via Unvalidated External URL in Data Ingestion Feature CWE-918 7.7 High 2026-03-12
CVE-2020-37044 OpenCTI 3.3.1 - Cross Site Scripting CWE-79 5.4 Medium 2026-01-30
CVE-2020-37041 OpenCTI 3.3.1 - Directory Traversal CWE-22 7.5 High 2026-01-30
CVE-2025-61782 Open Redirect in OpenCTI's SAML Authentication Flow CWE-601 5.4 Medium 2026-01-07
CVE-2025-61781 GraphQL IDOR allows authenticated user to delete workspace content of other users CWE-285 7.1 High 2026-01-05
CVE-2025-46732 OpenCTI's GraphQL IDOR enables authenticated users to modify or delete notifications of other users CWE-285 5.4 Medium 2025-07-18
CVE-2025-26621 OpenCTI vulnerable to Denial of Service through web hook CWE-94 7.6 High 2025-05-19
CVE-2025-24977 OpenCTI has remote code execution and sensitive secrets exposed through web hook CWE-94 9.1 Critical 2025-05-05
CVE-2025-24887 OpenCTI bypass of protected attribute update CWE-284 6.3 Medium 2025-04-30
CVE-2024-45805 OpenCTI leaks support information due to inadequate access control CWE-200 4.3 Medium 2024-12-26
CVE-2024-45404 OpenCTI's lack of Rate Limit lead to OTP brute forcing CWE-287 8.1 High 2024-12-11
CVE-2024-37155 OpenCTI May Bypass Introspection Restriction CWE-284 6.5 Medium 2024-11-18
CVE-2024-26139 OpenCTI Authenticated Privilege Escalation CWE-284 8.3 High 2024-05-23

All 22 known CVE vulnerabilities affecting opencti with full Chinese analysis, references, and POCs where available.