Product by Open Source
Opencti
14 known vulnerabilities in Opencti (Open Source), 0 of them actively exploited (CISA KEV).
Key figures
14
Vulnerabilities
0
Actively exploited (KEV)
0
Used by ransomware
1
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| Critical | CVE-2026-27960 | OpenCTI privilege escalation and unauthenticated access via default admin account | 9.8 | |
| High | CVE-2026-76820 | OpenCTI: Synchronizer SSRF: stream fetch has no URL validation | 7.7 | |
| High | CVE-2026-76821 | OpenCTI: User-Controlled ReDoS in JSON Ingestion Mapper | — | |
| Medium | CVE-2026-35211 | Opencti: Code Injection | 6.5 | |
| High | CVE-2024-37155 | OpenCTI May Bypass Introspection Restriction | 6.5 | |
| High | CVE-2026-35210 | OpenCTI: Authorization Bypass via `synchronized-upsert` HTTP Header Injection | 7.1 | |
| High | CVE-2026-44730 | Opencti: Improper Access Control | 7.2 | |
| Medium | CVE-2026-35212 | OpenCTI has XSS in the rendering of email-message observable body data | 6.1 | |
| Medium | CVE-2026-114505 | open source OpenCTI: security vulnerability | — | |
| Medium | CVE-2026-104258 | open source OpenCTI: security vulnerability | — | |
| Medium | CVE-2026-104253 | open source OpenCTI: security vulnerability | — | |
| High | CVE-2026-63477 | open source OpenCTI: security vulnerability | — | |
| High | CVE-2026-76823 | open source OpenCTI: security vulnerability | — | |
| High | CVE-2026-76822 | open source OpenCTI: security vulnerability | — |