Opencti-platform

    Dashboard / Vendors

    Products: 1
    Vulnerabilities: 17
    Known Exploited: 0
    2
    Critical Level Threats
    8
    High Level Threats
    6
    Medium Level Threats
    0
    Low Level Threats

    Vulnerabilities

    100806040200
    JanFebMarAprMayJunJulAugSepOctNovDec
    Critical Level Threats
    High Level Threats
    Medium Level Threats
    Low Level Threats

    Products Security index

    Actions
    Items Per Page

    Vulnerabilities

    CVE-2026-76820

    OpenCTI: Synchronizer SSRF: stream fetch has no URL validation

    Last Modified: Sep 17, 2026
    Published: Sep 15, 2026

    CVE-2026-76821

    OpenCTI: User-Controlled ReDoS in JSON Ingestion Mapper

    Last Modified: Sep 16, 2026
    Published: Sep 15, 2026

    CVE-2026-35211

    OpenCTI: Elasticsearch Painless Script Injection via GraphQL `script` filter operator allows authenticated user to exfiltrate data and cause DoS

    Last Modified: Jul 10, 2026
    Published: Jul 08, 2026

    CVE-2026-35210

    OpenCTI: Authorization Bypass via `synchronized-upsert` HTTP Header Injection

    Last Modified: Jul 09, 2026
    Published: Jul 08, 2026

    CVE-2026-35212

    OpenCTI has XSS in the rendering of email-message observable body data

    Last Modified: Jun 05, 2026
    Published: Jun 02, 2026
    Items Per Page
    Opencti-Platform Vulnerabilities & Security CVEs | CVE-DB