CVE-2026-27960

The OpenCTI platform (versions 6.6.0 through 6.9.12 ) contains a critical privilege escalation vulnerability allowing unauthenticated attackers to query the API as any existing user, including the default admin account. The root cause is an authentication bypass where the system accepts a Bearer ...