https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T08:35:19.029589+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2026-44730 CVE-2026-44730 — OpenCTI: Privilege escalation via graphQL API abusable by organization admins, due to incorrect ACL on userEdit relatio… 2026-10-03T08:35:19.031373+00:00

Affected: OpenCTI-Platform opencti

OpenCTI is an open source platform for managing cyber threat intelligence knowledge and observables. Prior to 6.9.7, an organization admin can escalate their privileges by adding a user from a different organization with higher privileges, to their own organization. This is due to incorrect ACL on userEdit relationAdd. This vulnerability is fixed in 6.9.7.

 https://cve.radiocsirt.org/vuln/ghsa-q537-qhj4-wcjx GHSA-q537-qhj4-wcjx — OpenCTI: Privilege escalation via graphQL API is abusable by organization admins, due to incorrect ACL on userEdit rela… 2026-10-03T08:35:19.031447+00:00

Affected: PyPI: pycti

### Summary An organization admin can escalate their privileges by adding a user from a different organization with higher privileges, to their own organization.

### Impact Full platform access, access to sensitive or proprietary information.