CVE-2026-76820

OpenCTI is an open source platform for managing cyber threat intelligence knowledge and observables. Prior to 7.260701.0, the synchronizerFetch GraphQL query called fetchRemoteStreams after checking only that a remote stream URL used HTTP or HTTPS. The backend did not apply the ingestion deny list or reject private, loopback, and link-local destinations, allowing an authenticated account with the INGESTION capability to make OpenCTI request internal services and cloud metadata endpoints. Returned connection errors could distinguish open HTTP ports, open non-HTTP ports, and closed ports, enabling internal network scanning, while compatible endpoint responses could disclose internal data. This issue is fixed in version 7.260701.0.

• CWE-918

• https://github.com/OpenCTI-Platform/opencti/commit/6c1114ce8ce8f3a9d9b8c82dfff3a3a462e5dc1f
• https://github.com/OpenCTI-Platform/opencti/pull/16617
• https://github.com/OpenCTI-Platform/opencti/releases/tag/7.260701.0
• https://github.com/OpenCTI-Platform/opencti/security/advisories/GHSA-f6pj-3m32-q934

Published

Sep 15, 2026

Last Modified

Sep 16, 2026

Status

Received

• One Click Account Takeover in GranolaHow a notification link broke out of Electron and led to a one-click account takeover.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-76804Nuclei is a vulnerability scanner built on a simple YAML-bas…5.5
• CVE-2026-76805Nuclei is a vulnerability scanner built on a simple YAML-bas…5.3
• CVE-2026-7681A security vulnerability has been detected in jsbroks COCO A…6.5
• CVE-2026-76816Netty is an asynchronous, event-driven network application f…3.5
• CVE-2026-76819Rejected reason: Further research determined the issue resul…
• CVE-2026-7682A security flaw has been discovered in Edimax BR-6208AC 1.02…6.3
• CVE-2026-76821OpenCTI is an open source platform for managing cyber threat…7.1
• CVE-2026-76825RestrictedPython is a tool that helps define a subset of the…8.4
• CVE-2026-76827A flaw was found in search-indexer. This vulnerability allow…6.8
• CVE-2026-76829Rejected reason: This CVE ID has been rejected or withdrawn …
• CVE-2026-7683A weakness has been identified in Edimax BR-6428nC up to 1.1…6.3
• CVE-2026-76830Rejected reason: This CVE ID has been rejected or withdrawn …