CVE-2026-39980CWE-1336

OpenCTI affected by RCE via notifier template

Critical · published April 9, 2026

CVSS v3.1
9.1
EPSS
1%
Percentile
70.4
In the wild
Unconfirmed
What it is

OpenCTI is an open source platform for managing cyber threat intelligence knowledge and observables. Prior to 6.9.5, the safeEjs.ts file does not properly sanitize EJS templates. Users with the Manage customization capability can run arbitrary JavaScript in the context of the OpenCTI platform process during notifier template execution. This vulnerability is fixed in 6.9.5.

The record
Technical detail
CVSS v3.1
9.1 · CRITICAL
Vector
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.01310 · 70.4th percentile
Weakness
CWE-1336 · Improper Neutralization of Special Elements Used in a Template Engine
Published
2026-04-09T16:54Z
EPSS history
Timeline
  • 09 APR 16:54Z
    OpenCTI affected by RCE via notifier template
    cvelistv5