CVE-2018-20226: Thehive-Project Cortex

High severity, CVSS 7.2. EPSS: 1.7% chance of exploitation in the next 30 days.

An organization administrator can add a super administrator in THEHIVE PROJECT Cortex before 2.1.3 due to the lack of overriding the Role.toString method.

Affected products

• Thehive-Project Cortex: before 2.1.3 (fixed in 2.1.3)

Published 2018-12-21. Last modified 2026-06-17.