Product by Filigran
Filigran OpenCTI
22 known vulnerabilities in Filigran OpenCTI (Filigran), 0 of them actively exploited (CISA KEV).
Key figures
22
Vulnerabilities
0
Actively exploited (KEV)
0
Used by ransomware
4
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| Critical | CVE-2026-27960 | OpenCTI privilege escalation and unauthenticated access via default admin account | 9.8 | |
| Critical | CVE-2026-39980 | OpenCTI affected by RCE via notifier template | 9.1 | |
| High | CVE-2020-37041 | OpenCTI 3.3.1 - Directory Traversal | 7.5 | |
| Critical | CVE-2025-24977 | OpenCTI has remote code execution and sensitive secrets exposed through web hook | 9.1 | |
| High | CVE-2022-30290 | Citeum Opencti: Improper Access Control | 7.5 | |
| Medium | CVE-2026-35211 | Opencti: Code Injection | 6.5 | |
| High | CVE-2024-45404 | OpenCTI's lack of Rate Limit lead to OTP brute forcing | 8.1 | |
| High | CVE-2024-37155 | OpenCTI May Bypass Introspection Restriction | 6.5 | |
| High | CVE-2026-35210 | OpenCTI: Authorization Bypass via `synchronized-upsert` HTTP Header Injection | 7.1 | |
| High | CVE-2026-44730 | Opencti: Improper Access Control | 7.2 | |
| High | CVE-2025-26621 | OpenCTI vulnerable to Denial of Service through web hook | 7.6 | |
| High | CVE-2024-26139 | OpenCTI Authenticated Privilege Escalation | 8.3 | |
| High | CVE-2026-21887 | OpenCTI has a Semi-Blind SSRF via Unvalidated External URL in Data Ingestion Feature | 7.7 | |
| Critical | CVE-2025-61781 | GraphQL IDOR allows authenticated user to delete workspace content of other users | 7.1 | |
| Medium | CVE-2020-37044 | OpenCTI 3.3.1 - Cross Site Scripting | 5.4 | |
| High | CVE-2026-21886 | OpenCTI's GraphQL Mutations Allow Deletion of Unrelated Entities | 6.5 | |
| Medium | CVE-2026-35212 | OpenCTI has XSS in the rendering of email-message observable body data | 6.1 | |
| Medium | CVE-2022-30289 | Citeum Opencti: Cross-Site Scripting (XSS) | 5.4 | |
| Medium | CVE-2025-24887 | OpenCTI bypass of protected attribute update | 6.3 | |
| Medium | CVE-2025-61782 | Open Redirect in OpenCTI's SAML Authentication Flow | 5.4 | |
| Medium | CVE-2025-46732 | OpenCTI's GraphQL IDOR enables authenticated users to modify or delete notifications of other users | 5.4 | |
| Medium | CVE-2024-45805 | OpenCTI leaks support information due to inadequate access control | 4.3 |