High severity8.3NVD Advisory· Published May 23, 2024· Updated Jun 17, 2026
CVE-2024-26139
CVE-2024-26139
Description
OpenCTI is an open source platform allowing organizations to manage their cyber threat intelligence knowledge and observables. Due to lack of certain security controls on the profile edit functionality, an authenticated attacker with low privileges can gain administrative privileges on the web application.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
3cpe:2.3:a:citeum:opencti:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:citeum:opencti:*:*:*:*:*:*:*:*range: <=5.12.31
- (no CPE)range: <= 5.12.31
Patches
Vulnerability mechanics
References
1News mentions
0No linked articles in our index yet.