https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T22:22:49.924594+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-324366 EUVD-2026-324366 2026-10-03T22:22:49.977380+00:00 EUVD-2026-324366 https://cve.radiocsirt.org/vuln/fkie_cve-2026-35212 fkie_cve-2026-35212 2026-10-03T22:22:49.977415+00:00

OpenCTI is an open source platform for managing cyber threat intelligence knowledge and observables. Versions prior to 7.260227.0 are vulnerable to XSS in the rendering of email-message observable body data. The content of the body field isn't appropriately sanitized when being rendered. Does require user interaction but could be exploited by someone sharing stix or any of the ingester. This could lead to CSRF and then large scale session theft. Version 7.260227.0 contains a fix.

 https://cve.radiocsirt.org/vuln/pysec-2026-203 PYSEC-2026-203 2026-10-03T22:22:49.977449+00:00

Affected: PyPI: pycti

OpenCTI is an open source platform for managing cyber threat intelligence knowledge and observables. Versions prior to 7.260227.0 are vulnerable to XSS in the rendering of email-message observable body data. The content of the body field isn't appropriately sanitized when being rendered. Does require user interaction but could be exploited by someone sharing stix or any of the ingester. This could lead to CSRF and then large scale session theft. Version 7.260227.0 contains a fix.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-1757 WID-SEC-W-2026-1757 — OpenCTI: Schwachstelle ermöglicht Cross-Site Scripting 2026-10-03T22:22:49.977474+00:00

Ein entfernter, anonymer Angreifer kann eine Schwachstelle in OpenCTI ausnutzen, um einen Cross-Site Scripting Angriff durchzuführen.