CT
Product
cti-transmute
16
CVEs
0
On KEV
8.8
Max CVSS
0
New 30D
Severity mix
Critical 0High 4Medium 11Low 1
Watch
Add cti-transmute to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-72759 | 6.9 | Aug 10 | cti-transmute Conversion History Authorization Bypass Leads to Sensitive Data Disclosure After Conversion Deletion Affected: through 1.4.0 |
| CVE-2026-73162 | 5.3 | Aug 11 | cti-transmute CSRF Allows Unauthorized Follow and Notification State Changes Affected: through 1.4.0 |
| CVE-2026-73156 | 5.3 | Aug 11 | cti-transmute Sunburst and Treemap Tooltips Allow Cross-Site Scripting via Crafted Conversion Data Affected: through 1.4.0 |
| CVE-2026-73155 | 5.3 | Aug 11 | cti-transmute Missing Authorization Allows Reactions to Private Comments Affected: through 1.4.0 |
| CVE-2026-73140 | 5.3 | Aug 11 | cti-transmute Evaluation Report Exports Expose Private Comments and Author Information Affected: through 1.4.0 |
| CVE-2026-72760 | 5.3 | Aug 10 | cti-transmute Following List Exposes User Email Addresses to Authenticated Users Affected: through 1.4.0 |
| CVE-2026-73161 | 5.1 | Aug 11 | cti-transmute Conversion Table Allows XSS via Unescaped Cell Content During Search Highlighting Affected: through 1.4.0 |
| CVE-2026-73159 | 5.1 | Aug 11 | cti-transmute Stored XSS via Crafted Tag Icon on Admin Triage Interface Affected: through 1.4.0 |
| CVE-2026-73158 | 5.1 | Aug 11 | cti-transmute Saved Graph Configuration Allows Stored Cross-Site Scripting via svgIcon Affected: through 1.4.0 |
| CVE-2026-72751 | 5.1 | Aug 10 | Stored Cross-Site Scripting in CTI-Transmute Conversion Graph via Malicious STIX/MISP Content Affected: through 1.4.0 |
| CVE-2026-71502 | 5.1 | Aug 6 | Unauthenticated Stored Vue Template Injection Leads to Cross-Site Scripting in CTI-Transmute Affected: through 1.4.0 |
Showing 11