CVE-2026-44730

OpenCTI is an open source platform for managing cyber threat intelligence knowledge and observables. Prior to 6.9.7, an organization admin can escalate their privileges by adding a user from a different organization with higher privileges, to their own organization. This is due to incorrect ACL on userEdit relationAdd. This vulnerability is fixed in 6.9.7.

• CWE-284

• https://github.com/OpenCTI-Platform/opencti/security/advisories/GHSA-q537-qhj4-wcjxVendor Advisory

Published

May 26, 2026

Last Modified

Jul 24, 2026

Status

Analyzed

• Uncovering a hidden BOLA in Appsmith's snapshot logicStrix autonomously discovered a BOLA/IDOR vulnerability in Appsmith's snapshot deletion path.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-44724systeminformation is a System and OS information library for…7.8
• CVE-2026-44726Deno is a JavaScript, TypeScript, and WebAssembly runtime. F…9.1
• CVE-2026-44727Jupyter Server is the backend for Jupyter web applications. …5.4
• CVE-2026-44728Babel is a compiler for writing next generation JavaScript. …7.8
• CVE-2026-44729Twenty is an open source CRM. In 1.18.0 and earlier, the fil…8.7
• CVE-2026-4473A vulnerability was detected in itsourcecode Online Doctor A…9.8
• CVE-2026-44731OpenProject is open-source, web-based project management sof…4.3
• CVE-2026-44732OpenProject is open-source, web-based project management sof…4.3
• CVE-2026-44733OpenProject is open-source, web-based project management sof…5.9
• CVE-2026-44734OpenProject is open-source, web-based project management sof…6.5
• CVE-2026-44735OpenProject is open-source, web-based project management sof…6.5
• CVE-2026-44736OpenProject is open-source, web-based project management sof…6.5