Skip to contentOctopus Deploy Server vulnerabilities
- octopus deploy serverIn affected versions of Octopus Server, incorrect validation of changes a user made to their own...CVE-2026-1246288.7 High
- octopus deploy serverIn affected versions of Octopus Server, incorrect validation of the external identity linked to a...CVE-2026-1246278.7 High
- octopus deploy serverIn affected versions of Octopus Server, insufficient validation of custom claims on OIDC accounts...CVE-2026-1168358.7 High
- octopus deploy serverIn affected versions of Octopus Server, incorrect validation of permissions assigned to a user...CVE-2026-1059487.7 High
- octopus deploy serverIn affected versions of Octopus Server, incorrect validation of the permissions assigned to a...CVE-2026-934877.1 High
- octopus deploy serverIn affected versions of Octopus Server, insufficient integrity protection of authentication...CVE-2026-964148.7 High
- octopus deploy serverIn affected versions of Octopus Server with the LDAP authentication provider enabled, any...CVE-2026-1184265.3 Medium
- octopus deploy serverIn affected versions of Octopus Server, a user with permission to upload a malicious nuget...CVE-2026-128875.1 Medium
- octopus deploy serverIn affected versions of Octopus Server, a user holding the System Manager role could escalate...CVE-2026-1174668.6 High
- octopus deploy serverIn affected versions of Octopus Server, creating a user invitation writes the invitation code to...CVE-2026-1173417.7 High
- octopus deploy serverIn affected versions of Octopus Server, OIDC token issuer validation was performed inconsistently...CVE-2026-1168708.7 High
- octopus deploy serverIn affected versions, Octopus Server incorrectly evaluates multiple scoped permission assignments...CVE-2026-1024888.7 High
- octopus deploy serverIn affected versions of Octopus Server, an authenticated user with permission to modify roles...CVE-2026-1024788.7 High
- octopus deploy serverIn affected versions of Octopus Server, users with certain scoped permission sets could execute...CVE-2026-782107.1 High
- octopus deploy serverIn affected versions of Octopus Server, an authenticated user with permissions to edit an...CVE-2026-1011698.7 High
- octopus deploy serverIn affected versions of Octopus Server, a user with permission to modify non built-in external...CVE-2026-923558.7 High
- octopus deploy serverIn affected versions of Octopus Server, users with certain scoped permission sets could execute...CVE-2026-917787.2 High
- octopus serverIn affected versions of Octopus Server under certain circumstances it is possible for sensitive...CVE-2026-141637.1 High
- octopus serverIn affected versions of Octopus Deploy Insufficient checks on the project trigger actions allows...CVE-2026-127025.1 Medium
- octopus deploy serverIn affected versions of Octopus Server with certain access levels it was possible to embed a...CVE-2026-82965.6 Medium
- octopus serverIn affected versions of Octopus Server, permissions were not checked correctly resulting in any...CVE-2026-48816.0 Medium
- octopus serverIn affected versions of Octopus Server it was possible for a low privileged user to manipulate an...CVE-2026-32372.3 Low
- octopus serverIn affected versions of Octopus Server it was possible to create a new API key from an existing...CVE-2026-32362.3 Low
- octopus serverIn affected version of Octopus Deploy it was possible to remove files and/or contents of files on...CVE-2026-07045.9 Medium
- octopus serverIn affected Microsoft Windows versions of Octopus Deploy, the server can be coerced into sending...CVE-2025-05395.9 Medium
- octopus serverIn affected versions of Octopus Server it was possible for a user with sufficient access to set...CVE-2025-05885.9 Medium
- octopus serverIn affected versions of Octopus Server error messages were handled unsafely on the error page. If...CVE-2025-05131.8 Low
- octopus serverIn affected versions of Octopus Deploy it was possible to upload files to unexpected locations on...CVE-2025-05262.3 Low
- octopus serverIn affected versions of Octopus Server the preview import feature could be leveraged to identify...CVE-2025-05252.3 Low
- octopus serverIn affected versions of Octopus Deploy where customers are using Active Directory for...CVE-2025-05896.9 Medium
- linux and microsoft windows octopus server, octopus server +1 moreSQL Injection in the Octopus Server REST APICVE-2024-91948.7 High
- octopus serverAffected versions of Octopus Server had a weak content security policy.CVE-2024-16562.6 Low
- octopus serverIn affected versions of Octopus Server OIDC cookies were using the wrong expiration time which...CVE-2024-79982.6 Low
- octopus serverIn affected versions of Octopus Server under certain circumstances it is possible for sensitive...CVE-2024-69726.5 Medium
- octopus serverIn affected versions of Octopus Server under certain conditions, a user with specific role...CVE-2024-48112.2 Low
- octopus serverIn affected versions of Octopus Server with certain access levels it was possible to embed a...CVE-2024-44564.1 Medium
- octopus serverIt was identified that in certain versions of Octopus Server, that a user created with no...CVE-2024-42263.5 Low
- octopus serverIt is possible for an API key to be logged in clear text in the audit log file after an invalid...CVE-2023-45094.3 Medium
- octopus serverA race condition was identified through which privilege escalation was possible in certain...CVE-2024-29758.8 High
- octopus serverIn affected versions of Octopus Server it is possible for the OpenID client secret to be logged...CVE-2023-19044.2 Medium
- octopus serverIn affected versions of Octopus Deploy it is possible for a low privileged guest user to craft a...CVE-2022-24165.5 Medium
- octopus serverIn affected versions of Octopus Deploy it is possible for a low privileged guest user to interact...CVE-2022-23465.5 Medium
- octopus serverIn affected versions of Octopus Deploy it is possible to discover network details via error messageCVE-2022-48705.3 Medium
- octopus deploy, octopus deploy server +1 moreIn affected versions of Octopus Deploy it is possible to unmask variable secrets using the...CVE-2023-22475.3 Medium
- octopus serverIn affected versions of Octopus Deploy it is possible to render user supplied input into the webpageCVE-2022-25075.3 Medium
- octopus serverIn affected versions of Octopus Deploy it is possible for a user to introduce code via offline...CVE-2022-40098.8 High
- octopus serverIn affected versions of Octopus Deploy it is possible for a user to view Workerpools without...CVE-2022-22594.3 Medium
- octopus serverIn affected versions of Octopus Deploy it is possible for a user to view Tagsets without being...CVE-2022-22584.3 Medium
- octopus serverIn affected versions of Octopus Deploy it is possible to upload a zipbomb file as a task which...CVE-2022-28837.5 High
- octopus serverIn affected versions of Octopus Server the help sidebar can be customized to include a Cross-Site...CVE-2022-48985.4 Medium
- Show moreLoading…