https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-04T13:14:32.862108+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-290296 EUVD-2026-290296 2026-10-04T13:14:32.923157+00:00 EUVD-2026-290296 https://cve.radiocsirt.org/vuln/fkie_cve-2026-39980 fkie_cve-2026-39980 2026-10-04T13:14:32.923201+00:00

OpenCTI is an open source platform for managing cyber threat intelligence knowledge and observables. Prior to 6.9.5, the safeEjs.ts file does not properly sanitize EJS templates. Users with the Manage customization capability can run arbitrary JavaScript in the context of the OpenCTI platform process during notifier template execution. This vulnerability is fixed in 6.9.5.

 https://cve.radiocsirt.org/vuln/pysec-2026-2265 PYSEC-2026-2265 2026-10-04T13:14:32.923246+00:00

Affected: PyPI: pycti

OpenCTI is an open source platform for managing cyber threat intelligence knowledge and observables. Prior to 6.9.5, the safeEjs.ts file does not properly sanitize EJS templates. Users with the Manage customization capability can run arbitrary JavaScript in the context of the OpenCTI platform process during notifier template execution. This vulnerability is fixed in 6.9.5.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-1036 WID-SEC-W-2026-1036 — OpenCTI: Schwachstelle ermöglicht Codeausführung 2026-10-04T13:14:32.923270+00:00

Ein entfernter, authentisierter Angreifer kann eine Schwachstelle in OpenCTI ausnutzen, um beliebigen Programmcode auszuführen.