Skip to contentOctopus Server vulnerabilities
- octopus serverIn affected versions of Octopus Server under certain circumstances it is possible for sensitive...CVE-2026-141637.1 High
- octopus serverIn affected versions of Octopus Deploy Insufficient checks on the project trigger actions allows...CVE-2026-127025.1 Medium
- octopus serverIn affected versions of Octopus Server, permissions were not checked correctly resulting in any...CVE-2026-48816.0 Medium
- octopus serverIn affected versions of Octopus Server it was possible for a low privileged user to manipulate an...CVE-2026-32372.3 Low
- octopus serverIn affected versions of Octopus Server it was possible to create a new API key from an existing...CVE-2026-32362.3 Low
- octopus serverIn affected version of Octopus Deploy it was possible to remove files and/or contents of files on...CVE-2026-07045.9 Medium
- octopus serverIn affected Microsoft Windows versions of Octopus Deploy, the server can be coerced into sending...CVE-2025-05395.9 Medium
- octopus serverIn affected versions of Octopus Server it was possible for a user with sufficient access to set...CVE-2025-05885.9 Medium
- octopus serverIn affected versions of Octopus Server error messages were handled unsafely on the error page. If...CVE-2025-05131.8 Low
- octopus serverIn affected versions of Octopus Deploy it was possible to upload files to unexpected locations on...CVE-2025-05262.3 Low
- octopus serverIn affected versions of Octopus Server the preview import feature could be leveraged to identify...CVE-2025-05252.3 Low
- octopus serverIn affected versions of Octopus Deploy where customers are using Active Directory for...CVE-2025-05896.9 Medium
- linux and microsoft windows octopus server, octopus server +1 moreSQL Injection in the Octopus Server REST APICVE-2024-91948.7 High
- octopus serverAffected versions of Octopus Server had a weak content security policy.CVE-2024-16562.6 Low
- octopus serverIn affected versions of Octopus Server OIDC cookies were using the wrong expiration time which...CVE-2024-79982.6 Low
- octopus serverIn affected versions of Octopus Server under certain circumstances it is possible for sensitive...CVE-2024-69726.5 Medium
- octopus serverIn affected versions of Octopus Server under certain conditions, a user with specific role...CVE-2024-48112.2 Low
- octopus serverIn affected versions of Octopus Server with certain access levels it was possible to embed a...CVE-2024-44564.1 Medium
- octopus serverIt was identified that in certain versions of Octopus Server, that a user created with no...CVE-2024-42263.5 Low
- octopus serverIt is possible for an API key to be logged in clear text in the audit log file after an invalid...CVE-2023-45094.3 Medium
- octopus serverA race condition was identified through which privilege escalation was possible in certain...CVE-2024-29758.8 High
- octopus serverIn affected versions of Octopus Server it is possible for the OpenID client secret to be logged...CVE-2023-19044.2 Medium
- octopus serverIn affected versions of Octopus Deploy it is possible for a low privileged guest user to craft a...CVE-2022-24165.5 Medium
- octopus serverIn affected versions of Octopus Deploy it is possible for a low privileged guest user to interact...CVE-2022-23465.5 Medium
- octopus serverIn affected versions of Octopus Deploy it is possible to discover network details via error messageCVE-2022-48705.3 Medium
- octopus server, octopus deploy tentacle +1 moreIn affected versions of Octopus Deploy it is possible to upload a zipbomb file as a task which...CVE-2022-40085.5 Medium
- octopus serverIn affected versions of Octopus Deploy it is possible to render user supplied input into the webpageCVE-2022-25075.3 Medium
- octopus serverIn affected versions of Octopus Deploy it is possible for a user to introduce code via offline...CVE-2022-40098.8 High
- octopus serverIn affected versions of Octopus Deploy it is possible for a user to view Workerpools without...CVE-2022-22594.3 Medium
- octopus serverIn affected versions of Octopus Deploy it is possible for a user to view Tagsets without being...CVE-2022-22584.3 Medium
- octopus serverIn affected versions of Octopus Deploy it is possible to upload a zipbomb file as a task which...CVE-2022-28837.5 High
- octopus serverIn affected versions of Octopus Server the help sidebar can be customized to include a Cross-Site...CVE-2022-48985.4 Medium
- octopus serverIn affected versions of Octopus Deploy users of certain browsers using AD to sign-in to Octopus...CVE-2022-36146.1 Medium
- octopus serverIn affected versions of Octopus Deploy it is possible for certain types of sensitive variables to...CVE-2022-34607.5 High
- octopus serverIn affected versions of Octopus Server it is possible for target discovery to print certain...CVE-2022-27217.5 High
- octopus serverIn affected versions of Octopus Server where access is managed by an external authentication...CVE-2022-25729.8 Critical
- octopus serverIn affected versions of Octopus Server it is possible to reveal the existence of resources in a...CVE-2022-25085.3 Medium
- octopus serverIn affected versions of Octopus Server it is possible for a session token to be valid...CVE-2022-27829.1 Critical
- octopus serverIn affected versions of Octopus Server it is possible to use the Git Connectivity test function...CVE-2022-27808.1 High
- octopus serverIn affected versions of Octopus Server it is possible to reveal information about teams via the...CVE-2022-28286.5 Medium
- octopus serverIn affected versions of Octopus Server it was identified that when a sensitive value is a...CVE-2022-27205.3 Medium
- octopus serverIn affected versions of Octopus Server it was identified that a session cookie could be used as...CVE-2022-27835.3 Medium
- octopus serverIn affected versions of Octopus Server it was identified that the same encryption process was...CVE-2022-27815.3 Medium
- octopus serverIn affected versions of Octopus Deploy it is possible to bypass rate limiting on login using null...CVE-2022-27789.8 Critical
- octopus serverIn affected versions of Octopus Deploy it is possible to reveal the Space ID of spaces that the...CVE-2022-27604.3 Medium
- octopus serverIn affected versions of Octopus Deploy it is possible to upload a package to built-in feed with...CVE-2022-25286.5 Medium
- octopus serverIn affected versions of Octopus Deploy it is possible to perform a Regex Denial of Service...CVE-2022-20757.5 High
- octopus serverIn affected versions of Octopus Deploy it is possible to perform a Regex Denial of Service using...CVE-2022-20747.5 High
- octopus serverIn affected versions of Octopus Deploy it is possible to perform a Regex Denial of Service via...CVE-2022-20497.5 High
- octopus serverIn affected versions of Octopus Deploy it is possible to unmask sensitive variables by using...CVE-2022-19015.3 Medium
- Show moreLoading…