Opencti
Vendor:
First CVE: Jul 5, 2022 · Active for 4 years
22
Total CVEs
More Total CVEs than 95% of tracked products
5.5
Avg CVEs / Year
Higher CVE frequency than 91% of tracked products
7.2
Avg CVSS
Higher Avg CVSS than 47% of tracked products
0.0%
KEV Rate
Bottom 1%
Trends Over Time
The number and severity of CVEs published that impact Opencti over time
Volume of CVEsAvg CVSS Base Score
First CVE
Jul 5, 2022
4 years ago
Most Recent CVE
Jul 8, 2026
19 days ago
CVE Severity & Scoring
Opencti22 CVEs
41%
45%
14%
All CVEs352,785 CVEs
45%
40%
11%
MediumHighCritical
Attack Vector
Local0 (0.0%)
Network22 (100.0%)
Unknown0 (0.0%)
Physical0 (0.0%)
Adjacent Network0 (0.0%)
Attack Complexity
Low22 (100.0%)
High0 (0.0%)
Unknown0 (0.0%)
User Interaction
None18 (81.8%)
Unknown0 (0.0%)
Required4 (18.2%)
Privileges Required
Low10 (45.5%)
High4 (18.2%)
None8 (36.4%)
Unknown0 (0.0%)
Top CVEs
Signals from CVEs in this product scope (22 CVEs).
22 CVEs · Highest risk first
| CVE | Published | CVSS | Risk | KEV | Exploit |
|---|---|---|---|---|---|
CVE-2026-27960CRITICAL OpenCTI is an open source platform for managing cyber threat intelligence knowledge and observables. In versions 6.6.0 through 6.9.12, there is a privilege escalation vulnerability | May 5, 2026 | 9.8 | 42 | NO | NO |
CVE-2026-35210HIGH OpenCTI is an open source platform for managing cyber threat intelligence knowledge and observables. Prior to 7.260326.0, an authorization bypass vulnerability in OpenCTI allows an | Jul 8, 2026 | 7.1 | 32 | NO | NO |
CVE-2026-35211MEDIUM OpenCTI is an open source platform for managing cyber threat intelligence knowledge and observables. Prior to 7.260401.0, the OpenCTI GraphQL API exposes a script filter operator i | Jul 8, 2026 | 6.5 | 29 | NO | NO |
CVE-2025-61781CRITICAL OpenCTI is an open source platform for managing cyber threat intelligence knowledge and observables. Prior to version 6.8.1, the GraphQL mutation "WorkspacePopoverDeletionMutation" | Jan 5, 2026 | 9.1 | 29 | NO | NO |
CVE-2025-24977CRITICAL OpenCTI is an open cyber threat intelligence (CTI) platform. Prior to version 6.4.11 any user with the capability `manage customizations` can execute commands on the underlying inf | May 5, 2025 | 9.1 | 29 | NO | NO |
CVE-2026-44730HIGH OpenCTI is an open source platform for managing cyber threat intelligence knowledge and observables. Prior to 6.9.7, an organization admin can escalate their privileges by adding a | May 26, 2026 | 7.2 | 28 | NO | NO |
CVE-2026-39980HIGH OpenCTI is an open source platform for managing cyber threat intelligence knowledge and observables. Prior to 6.9.5, the safeEjs.ts file does not properly sanitize EJS templates. U | Apr 9, 2026 | 7.2 | 27 | NO | NO |
CVE-2026-35212MEDIUM OpenCTI is an open source platform for managing cyber threat intelligence knowledge and observables. Versions prior to 7.260227.0 are vulnerable to XSS in the rendering of email-me | Jun 2, 2026 | 6.1 | 26 | NO | NO |
CVE-2026-21886HIGH OpenCTI is an open source platform for managing cyber threat intelligence knowledge and observables. Prior to version 6.9.1, the GraphQL mutations "IndividualDeletionDeleteMutation | Mar 17, 2026 | 8.1 | 26 | NO | NO |
CVE-2026-21887HIGH OpenCTI is an open source platform for managing cyber threat intelligence knowledge and observables. Prior to 6.8.16, the OpenCTI platform’s data ingestion feature accepts user-sup | Mar 12, 2026 | 7.7 | 26 | NO | NO |
Exploit Exposure
Signals from CVEs in this product scope (22 CVEs).
CISA KEV
0 CVEs
0.0% of CVEs· Bottom 1%
Metasploit
0 CVEs
0.0% of CVEs· Bottom 1%
Nuclei
0 CVEs
0.0% of CVEs· Bottom 1%
ExploitDB
0 CVEs
0.0% of CVEs· Bottom 1%
Social Chatter
Signals from CVEs in this product scope (22 CVEs).
Media Mentions
Signals from CVEs in this product scope (22 CVEs).
Top CNAs Publishing CVEs For Opencti
Top CWEs
Versions
| Version | CVE Count | Avg CVSS | Avg EPSS | KEV | Exploits |
|---|---|---|---|---|---|
| 3.3.1 | 2 | 6.8 | 0.7% | 0 | 0 |