https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-08T05:41:01.350542+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2026-44730 CVE-2026-44730 — OpenCTI: Privilege escalation via graphQL API abusable by organization admins, due to incorrect ACL on userEdit relatio… 2026-10-08T05:41:01.364584+00:00

Affected: OpenCTI-Platform opencti

OpenCTI is an open source platform for managing cyber threat intelligence knowledge and observables. Prior to 6.9.7, an organization admin can escalate their privileges by adding a user from a different organization with higher privileges, to their own organization. This is due to incorrect ACL on userEdit relationAdd. This vulnerability is fixed in 6.9.7.