{"description":"Trending threats, MITRE ATT\u0026CK coverage, and detection metadata. Fed continuously.","favicon":"https://feed.craftedsignal.io/favicon-32x32.png","feed_url":"https://feed.craftedsignal.io/products/opencti-version-unknown/feed.json","home_page_url":"https://feed.craftedsignal.io/","icon":"https://feed.craftedsignal.io/apple-touch-icon.png","items":[{"_cs_actors":[],"_cs_cpes":[],"_cs_cves":[],"_cs_exploited":false,"_cs_has_poc":false,"_cs_poc_references":[],"_cs_products":["OpenCTI (version unknown)"],"_cs_severities":["high"],"_cs_tags":["web-application","vulnerability","privilege-escalation","xss"],"_cs_type":"advisory","_cs_vendors":["OpenCTI"],"content_html":"\u003cp\u003eOpenCTI has been identified as containing multiple vulnerabilities that allow an authenticated remote attacker to perform privilege escalation or trigger cross-site scripting (XSS) attacks. The vendor has not yet disclosed specific details regarding the affected version ranges or individual CVE identifiers. Organizations should monitor official OpenCTI release channels for patches and updates.\u003c/p\u003e\n\u003ch2 id=\"recommendation\"\u003eRecommendation\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eInventory all instances of OpenCTI within the environment to prepare for patching.\u003c/li\u003e\n\u003cli\u003eSubscribe to official OpenCTI security advisories and the BSI WID portal to receive notifications regarding version updates.\u003c/li\u003e\n\u003cli\u003eReview access logs and audit trails for anomalous administrative actions or suspicious user activity following the deployment of future patches.\u003c/li\u003e\n\u003c/ul\u003e\n","date_modified":"2026-11-05T12:54:22Z","date_published":"2026-11-05T12:54:22Z","id":"https://feed.craftedsignal.io/briefs/2026-11-opencti-vulnerabilities/","summary":"OpenCTI is affected by multiple vulnerabilities allowing a remote, authenticated attacker to perform privilege escalation or execute cross-site scripting (XSS) attacks.","title":"OpenCTI: Privilege Escalation and Cross-Site Scripting Vulnerabilities","url":"https://feed.craftedsignal.io/briefs/2026-11-opencti-vulnerabilities/"}],"language":"en","title":"CraftedSignal Threat Feed - OpenCTI (Version Unknown)","version":"https://jsonfeed.org/version/1.1"}