Signal is active with 2 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
OpenCTI is an open source platform for managing cyber threat intelligence knowledge and observables. Prior to version 6.9.1, the GraphQL mutations "IndividualDeletionDeleteMutation" is intended to allow users to delete individual entity objects respectively. However, it was observed that this mutation can be misused to delete unrelated and sensitive objects such as analyses reports etc. This behavior stems from the lack of validation in the API to ensure that the targeted object is contextually related to the mutation being executed. Version 6.9.1 fixes the issue.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
NONE
If you run products in this scope, you should treat this CVE as relevant to your environment.
CVE-2026-21886 OpenCTI is an open source platform for managing cyber threat intelligence knowledge and observables. Prior to version 6.9.1, the GraphQL mutations "IndividualDeletion… https://www.cve.org/CVERecord?id=CVE-2026-21886
Post summary
The text references CVE-2026-21886 affecting OpenCTI before version 6.9.1 and mentions a GraphQL mutation, but offers no further technical or mitigation details.
CVE-2026-21886 OpenCTI GraphQL Mutation Vulnerability Allows Unauthorized Object Deletion https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-21886
Post summary
The post announces CVE-2026-21886, a GraphQL mutation flaw in OpenCTI that permits unauthorized deletion of objects, with details available on Vulmon.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | citeum | opencti | - | - | - |