https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-06T05:51:18.091989+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-274383 EUVD-2026-274383 2026-10-06T05:51:18.156112+00:00 EUVD-2026-274383 https://cve.radiocsirt.org/vuln/fkie_cve-2020-37041 fkie_cve-2020-37041 2026-10-06T05:51:18.156148+00:00

OpenCTI 3.3.1 is vulnerable to a directory traversal attack via the static/css endpoint. An unauthenticated attacker can read arbitrary files from the filesystem by sending crafted GET requests with path traversal sequences (e.g., '../') in the URL. For example, requesting /static/css//../../../../../../../../etc/passwd returns the contents of /etc/passwd. This vulnerability was discovered by Raif Berkay Dincel and confirmed on Linux Mint and Windows 10.

 https://cve.radiocsirt.org/vuln/ghsa-wvqh-8vgx-x89q GHSA-wvqh-8vgx-x89q 2026-10-06T05:51:18.156183+00:00

OpenCTI 3.3.1 is vulnerable to a directory traversal attack via the static/css endpoint. An unauthenticated attacker can read arbitrary files from the filesystem by sending crafted GET requests with path traversal sequences (e.g., '../') in the URL. For example, requesting /static/css//../../../../../../../../etc/passwd returns the contents of /etc/passwd. This vulnerability was discovered by Raif Berkay Dincel and confirmed on Linux Mint and Windows 10.

 https://cve.radiocsirt.org/vuln/pysec-2026-114 PYSEC-2026-114 2026-10-06T05:51:18.156203+00:00

Affected: PyPI: pycti

OpenCTI 3.3.1 is vulnerable to a directory traversal attack via the static/css endpoint. An unauthenticated attacker can read arbitrary files from the filesystem by sending crafted GET requests with path traversal sequences (e.g., '../') in the URL. For example, requesting /static/css//../../../../../../../../etc/passwd returns the contents of /etc/passwd. This vulnerability was discovered by Raif Berkay Dincel and confirmed on Linux Mint and Windows 10.