CVE-2026-27960: fallo crítico en OpenCTI-Platform opencti
OpenCTI privilege escalation and unauthenticated access via default admin account
Publicada el · Actualizada el
Aviso por correo cuando entre en el KEV, tenga PoC pública o suba de nota.
65Vexday Risk Score
Corrige ahora. Ella explotación observada por VulnCheck y tiene exploit funcional público.
ssvc Actcvss 9.8epss 7.1%
de la publicación al armael mismo día
Publicada en NVD5 may
metasploit4 may
VulnCheck+139d
OpenCTI is an open source platform for managing cyber threat intelligence knowledge and observables. In versions 6.6.0 through 6.9.12, there is a privilege escalation vulnerability that can be exploited by unauthenticated attackers to query the API as any existing user, including the default admin account. This issue has been fixed in version 6.9.13. As a workaround, the default admin can be disabled using the `APP__ADMIN__EXTERNALLY_MANAGED` configuration.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Productos afectados
OpenCTI-Platform · openctiCVEs relacionadas — OpenCTI-Platform opencti
En el mismo producto, de las más peligrosas a las menos.
CVE-2026-39980CRITICALOpenCTI affected by RCE via notifier templateEPSS 1.4%CVE-2025-24977CRITICALOpenCTI has remote code execution and sensitive secrets exposed through web hookEPSS 0.9%CVE-2024-45404HIGHOpenCTI's lack of Rate Limit lead to OTP brute forcingEPSS 0.6%CVE-2026-35211MEDIUMOpenCTI: Elasticsearch Painless Script Injection via GraphQL `script` filter operator allows authenticated user to exfiltrate data and cause DoSEPSS 0.5%CVE-2026-76821HIGHOpenCTI: User-Controlled ReDoS in JSON Ingestion MapperEPSS 0.5%CVE-2024-37155MEDIUMOpenCTI May Bypass Introspection RestrictionEPSS 0.5%