CVE-2026-35211

OpenCTI is an open source platform for managing cyber threat intelligence knowledge and observables. Prior to 7.260401.0, the OpenCTI GraphQL API exposes a script filter operator in its FilterOperator enum that allows any authenticated user with the KNOWLEDGE capability to pass user-supplied Elasticsearch Painless script values directly into search queries without validation or sanitization, allowing computationally expensive scripts to consume cluster CPU resources and degrade or deny service for all users. This issue is fixed in version 7.260401.0.

• CWE-94
• CWE-863

• https://github.com/OpenCTI-Platform/opencti/commit/b134ccedf9e68386723cb42197f8e1d60c3bdbd9Patch
• https://github.com/OpenCTI-Platform/opencti/pull/15284Issue Tracking, Patch
• https://github.com/OpenCTI-Platform/opencti/releases/tag/7.260401.0Release Notes
• https://github.com/OpenCTI-Platform/opencti/security/advisories/GHSA-qpp6-p693-rmm4Vendor Advisory

Published

Jul 8, 2026

Last Modified

Jul 13, 2026

Status

Analyzed

• Uncovering a hidden BOLA in Appsmith's snapshot logicStrix autonomously discovered a BOLA/IDOR vulnerability in Appsmith's snapshot deletion path.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-35205Helm is a package manager for Charts for Kubernetes. From 4.…7.8
• CVE-2026-35206Helm is a package manager for Charts for Kubernetes. In Helm…4.4
• CVE-2026-35207dde-control-center is the control panel of DDE, the Deepin D…5.4
• CVE-2026-35208lichess.org is the forever free, adless and open source ches…5.4
• CVE-2026-35209defu is software that allows uers to assign default properti…7.5
• CVE-2026-35210OpenCTI is an open source platform for managing cyber threat…7.1
• CVE-2026-35212OpenCTI is an open source platform for managing cyber threat…6.1
• CVE-2026-35213@hapi/content provided HTTP Content-* headers parsing. All v…7.5
• CVE-2026-35214Budibase is an open-source low-code platform. Prior to versi…8.7
• CVE-2026-35215Firebird is an open-source relational database management sy…7.5
• CVE-2026-35216Budibase is an open-source low-code platform. Prior to versi…9
• CVE-2026-35217NanoMQ contains a protocol-semantics flaw in its MQTT v5 `SU…6.5