[ Vendor · 4 CVEs ]
Octopus Deploy
CVEs affecting Octopus Deploy published in the last 30 days, plus any Octopus Deploy CVE on CISA's exploited list.
| CVE | Published | Severity | Vulnerability | Signals |
|---|---|---|---|---|
| CVE-2026-102488 | 8 Oct 2026 | CVSS 8.7 | Octopus Deploy Octopus ServerIn affected versions, Octopus Server incorrectly evaluates multiple scoped permission assignments, allowing a highly privileged user to obtain… | |
| CVE-2026-102478 | 7 Oct 2026 | CVSS 8.7 | Octopus Deploy Octopus ServerIn affected versions of Octopus Server, an authenticated user with permission to modify roles could bypass the protections preventing access abuse… | |
| CVE-2026-78210 | 1 Oct 2026 | CVSS 7.1 | Octopus Deploy Octopus ServerIn affected versions of Octopus Server, users with certain scoped permission sets could execute arbitrary scripts in an environment without… | |
| CVE-2026-101169 | 29 Sep 2026 | CVSS 8.7 | Octopus Deploy Octopus ServerIn affected versions of Octopus Server, an authenticated user with permissions to edit an Environment or Project can set specifically crafted JSON… |