Is CVE-2026-44730 actively exploited?

No active exploitation of CVE-2026-44730 has been confirmed so far. Continue monitoring, as exploit status can change.

Can CVE-2026-44730 be exploited remotely?

Yes. CVE-2026-44730 is exploitable remotely over the network (CVSS attack vector: Network).

What is the CVSS score of CVE-2026-44730?

CVE-2026-44730 has a CVSS score of 7.2 (HIGH).

HOME VULNERABILITIESCVE-2026-44730

HIGH

CVE-2026-44730

CWE-284Published: May 26, 2026· Updated: May 27, 2026

7.2

CVSS v3.1

Official Description

OpenCTI is an open source platform for managing cyber threat intelligence knowledge and observables. Prior to 6.9.7, an organization admin can escalate their privileges by adding a user from a different organization with higher privileges, to their own organization. This is due to incorrect ACL on userEdit relationAdd. This vulnerability is fixed in 6.9.7.

NVD Source

Technical Analysis

CVE-2026-44730 can be exploited remotely over the network without requiring physical or adjacent access, significantly expanding the attack surface for threat actors.

Exploitation requires high privileges, which limits the exposure to scenarios where an attacker has already gained initial access.

A successful exploit results in complete confidentiality breach (data exposure), full integrity compromise (data manipulation), availability disruption (denial of service), with a CVSS base score of 7.2.