https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T20:36:17.090012+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-322413 EUVD-2026-322413 2026-10-03T20:36:17.159460+00:00 EUVD-2026-322413 https://cve.radiocsirt.org/vuln/fkie_cve-2026-44730 fkie_cve-2026-44730 2026-10-03T20:36:17.159497+00:00

OpenCTI is an open source platform for managing cyber threat intelligence knowledge and observables. Prior to 6.9.7, an organization admin can escalate their privileges by adding a user from a different organization with higher privileges, to their own organization. This is due to incorrect ACL on userEdit relationAdd. This vulnerability is fixed in 6.9.7.

 https://cve.radiocsirt.org/vuln/ghsa-q537-qhj4-wcjx GHSA-q537-qhj4-wcjx — OpenCTI: Privilege escalation via graphQL API is abusable by organization admins, due to incorrect ACL on userEdit rela… 2026-10-03T20:36:17.159531+00:00

Affected: PyPI: pycti

### Summary An organization admin can escalate their privileges by adding a user from a different organization with higher privileges, to their own organization.

### Impact Full platform access, access to sensitive or proprietary information.

 https://cve.radiocsirt.org/vuln/pysec-2026-167 PYSEC-2026-167 2026-10-03T20:36:17.159559+00:00

Affected: PyPI: pycti

OpenCTI is an open source platform for managing cyber threat intelligence knowledge and observables. Prior to 6.9.7, an organization admin can escalate their privileges by adding a user from a different organization with higher privileges, to their own organization. This is due to incorrect ACL on userEdit relationAdd. This vulnerability is fixed in 6.9.7.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-1362 WID-SEC-W-2026-1362 — OpenCTI: Schwachstelle ermöglicht Erlangen von Administratorrechten 2026-10-03T20:36:17.159580+00:00

Ein entfernter, authentisierter Angreifer kann eine Schwachstelle in OpenCTI ausnutzen, um Administratorrechte zu erlangen.