CVE-2026-35212: OpenCTI has XSS in the rendering of email-message observable body data
OpenCTI is an open source platform for managing cyber threat intelligence knowledge and observables. Versions prior to 7.260227.0 are vulnerable to XSS in the rendering of email-message observable body data. The content of the body field isn't appropriately sanitized when being rendered. Does require user interaction but could be exploited by someone sharing stix or any of the ingester. This could lead to CSRF and then large scale session theft. Version 7.260227.0 contains a fix.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 7.260227.0
Event History
Frequently Asked Questions
What is the severity of CVE-2026-35212?
The severity of CVE-2026-35212 is medium with a CVSS score of 5.3.
How do I fix CVE-2026-35212?
To fix CVE-2026-35212, upgrade OpenCTI to version 7.260227.0 or later.
What type of vulnerability is CVE-2026-35212?
CVE-2026-35212 is a cross-site scripting (XSS) vulnerability.
Which versions of OpenCTI are affected by CVE-2026-35212?
OpenCTI versions prior to 7.260227.0 are affected by CVE-2026-35212.
What can attackers do with CVE-2026-35212?
Attackers can exploit CVE-2026-35212 to inject malicious scripts into the email-message observable body data.