CVE-2026-35211Medium· 6.5▾ SunlitOpenCTI is an open source platform for managing cyber threat intelligence knowledge and observables. Prior to 7.260401.0, the OpenCTI GraphQL API exposes a script filter operator in its FilterOperator enum that allows any authenticated u…
▾ Sunlit zone — Low / medium · no exploitation signal
impact 35.8 · likelihood 0.1 · exploitation 0
Need a working PoC? Pro members can cast a request and our team develops one — it lands right here.
Exploit-prediction probability, daily snapshots since Jul 31.
Disclosure to exploitation, from the record and what we observed since indexing it.
Disclosed via NVD
Last analysed / modified upstream
0.4%
0.4% → 0.5%
OpenCTI is an open source platform for managing cyber threat intelligence knowledge and observables. Prior to 7.260401.0, the OpenCTI GraphQL API exposes a script filter operator in its FilterOperator enum that allows any authenticated user with the KNOWLEDGE capability to pass user-supplied Elasticsearch Painless script values directly into search queries without validation or sanitization, allowing computationally expensive scripts to consume cluster CPU resources and degrade or deny service for all users. This issue is fixed in version 7.260401.0.
opencti < 7.260401.0Upgrade past the affected range:
opencti 7.260401.0Connected by shared product, vendor, weakness, or advisory.
CVE-2025-61781High· 7.1OpenCTI is an open source platform for managing cyber threat intelligence knowledge and observables
CVE-2026-35210High· 7.1OpenCTI is an open source platform for managing cyber threat intelligence knowledge and observables
CVE-2026-76820High· 7.7OpenCTI is an open source platform for managing cyber threat intelligence knowledge and observables
CVE-2026-76821High· 7.1OpenCTI is an open source platform for managing cyber threat intelligence knowledge and observables
CVE-2025-61782Medium· 5.4OpenCTI is an open source platform for managing cyber threat intelligence knowledge and observables
CVE-2025-67740Low· 2.7In JetBrains TeamCity before 2025.11 improper access control could expose GitHub App token's metadata