Baitaphish
Security intelligence
SearchLatest briefing
CVE Explorer

CVE-2026-27960

OpenCTI is an open source platform for managing cyber threat intelligence knowledge and observables. In versions 6.6.0 through 6.9.12, there is a privilege escalation vulnerability that can be exploited by unauthenticated attackers to query the API as any existing user, including the default admin account. This issue has been fixed in version 6.9.13. As a workaround, the default admin can be disabled using the `APP__ADMIN__EXTERNALLY_MANAGED` configuration.
Lifecycle PUBLISHED1 preserved revisionFact urn:baitaphish:canonical-cve-fact-revision:v2:d14e7f17eefa100771d86b7e50f7348a30e69280f4713d4f01ccb5d9cd250c95
Known exploited
Not asserted
Disputed
No
Stale source
No
Conflicts
0

Affected products and versions

1 source assertion
{"product":"opencti","vendor":"OpenCTI-Platform","versions":[{"status":"affected","version":">= 6.6.0, < 6.9.13"}]}
  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:4eff74e53dda01b50e0a5e75a6fad57c981f3da6a2fdf0a3415924279f1ad5c0 · sha256:66dc71684304dded… · /containers/cna/affected/0

Provider-owned CVSS observations

1 source assertion
{"metric":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"HIGH","baseScore":9.8,"baseSeverity":"CRITICAL","confidentialityImpact":"HIGH","integrityImpact":"HIGH","privilegesRequired":"NONE","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","version":"3.1"},"metric_type":"cvssV3_1"}
  • cve_program_cvelist_v5cvss
    urn:baitaphish:normalized-source-record:v2:4eff74e53dda01b50e0a5e75a6fad57c981f3da6a2fdf0a3415924279f1ad5c0 · sha256:66dc71684304dded… · /containers/cna/metrics/0/cvssV3_1

CWE assertions

1 source assertion
{"cweId":"CWE-287","description":"CWE-287: Improper Authentication","lang":"en","type":"CWE"}
  • cve_program_cvelist_v5cwe
    urn:baitaphish:normalized-source-record:v2:4eff74e53dda01b50e0a5e75a6fad57c981f3da6a2fdf0a3415924279f1ad5c0 · sha256:66dc71684304dded… · /containers/cna/problemTypes/0/descriptions/0

Source references

1 source assertion
{"name":"https://github.com/OpenCTI-Platform/opencti/security/advisories/GHSA-6vvv-vmfr-xhrx","tags":["x_refsource_CONFIRM"],"url":"https://github.com/OpenCTI-Platform/opencti/security/advisories/GHSA-6vvv-vmfr-xhrx"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:4eff74e53dda01b50e0a5e75a6fad57c981f3da6a2fdf0a3415924279f1ad5c0 · sha256:66dc71684304dded… · /containers/cna/references/0

Attribution and limitations

  • CVE Program CVEList V5: Reproduce the MITRE copyright designation and CVE license in copies. Source →

Provider severity values are preserved separately. Baitaphish does not convert them into a risk rating, infer affected products, or treat EPSS as observed exploitation.

← Back to CVE Explorer