Lucene search
+L

544 matches found

NVD
NVD
•added 2026/07/24 9:16 a.m.•19 views

CVE-2026-12702

In affected versions of Octopus Deploy Insufficient checks on the project trigger actions allows an unauthorized user to trigger a deployment...

5.1CVSS0.00331EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2026/07/24 8:29 a.m.•52 views

CVE-2026-12702

In affected versions of Octopus Deploy Insufficient checks on the project trigger actions allows an unauthorized user to trigger a deployment...

5.1CVSS0.00331EPSS
SaveExploits0References1
attackerkb
attackerkb
•added 2026/07/24 8:29 a.m.•19 views

CVE-2026-12702

In affected versions of Octopus Deploy Insufficient checks on the project trigger actions allows an unauthorized user to trigger a deployment...

5.1CVSS5.9AI score0.00331EPSS
SaveExploits0References2Affected Software1
EUVD
EUVD
•added 2026/07/24 8:29 a.m.•24 views

EUVD-2026-48531

In affected versions of Octopus Deploy Insufficient checks on the project trigger actions allows an unauthorized user to trigger a deployment...

5.1CVSS5.9AI score0.00331EPSS
SaveExploits0References1
CVE
CVE
•added 2026/07/24 8:29 a.m.•41 views

CVE-2026-12702

CVE-2026-12702 affects Octopus Deploy. The issue stems from insufficient checks on project trigger actions, enabling an unauthorized user to trigger a deployment. The description notes this occurs in “affected versions” but does not specify exact versions or products beyond Octopus Deploy, nor pr...

5.1CVSS5.8AI score0.00331EPSS
SaveExploits0References1Affected Software1
Vulnrichment
Vulnrichment
•added 2026/07/24 8:29 a.m.•13 views

CVE-2026-12702

In affected versions of Octopus Deploy Insufficient checks on the project trigger actions allows an unauthorized user to trigger a deployment...

5.1CVSS5.8AI score0.00331EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2026/07/24 12:00 a.m.•43 views

PT-2026-64262

In affected versions of Octopus Deploy Insufficient checks on the project trigger actions allows an unauthorized user to trigger a deployment...

5.1CVSS5.9AI score0.00331EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/07/24 12:00 a.m.•0 views

CVE-2026-12702: Improper Access Control

In affected versions of Octopus Deploy Insufficient checks on the project trigger actions allows an unauthorized user to trigger a deployment...

5.1CVSS5.7AI score0.00331EPSS
SaveExploits0References3
RedhatCVE
RedhatCVE
•added 2026/02/26 10:35 p.m.•18 views

CVE-2026-0704

In affected version of Octopus Deploy it was possible to remove files and/or contents of files on the host using an API endpoint. The field lacked validation which could potentially result in ways to circumvent expected workflows...

9.1CVSS5.4AI score0.00338EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/02/25 3:31 p.m.•15 views

EUVD-2026-8636

In affected version of Octopus Deploy it was possible to remove files and/or contents of files on the host using an API endpoint. The field lacked validation which could potentially result in ways to circumvent expected workflows...

5.9CVSS5.4AI score0.00338EPSS
SaveExploits0References2
OSV
OSV
•added 2026/02/25 1:16 p.m.•14 views

CVE-2026-0704

In affected version of Octopus Deploy it was possible to remove files and/or contents of files on the host using an API endpoint. The field lacked validation which could potentially result in ways to circumvent expected workflows...

9.1CVSS5.8AI score0.00338EPSS
SaveExploits0References1
NVD
NVD
•added 2026/02/25 1:16 p.m.•20 views

CVE-2026-0704

In affected version of Octopus Deploy it was possible to remove files and/or contents of files on the host using an API endpoint. The field lacked validation which could potentially result in ways to circumvent expected workflows...

9.1CVSS0.00338EPSS
SaveExploits0References1
attackerkb
attackerkb
•added 2026/02/25 12:22 p.m.•10 views

CVE-2026-0704

In affected version of Octopus Deploy it was possible to remove files and/or contents of files on the host using an API endpoint. The field lacked validation which could potentially result in ways to circumvent expected workflows...

9.1CVSS5.4AI score0.00338EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
•added 2026/02/25 12:22 p.m.•35 views

CVE-2026-0704

In affected version of Octopus Deploy it was possible to remove files and/or contents of files on the host using an API endpoint. The field lacked validation which could potentially result in ways to circumvent expected workflows...

5.9CVSS0.00338EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2026/02/25 12:22 p.m.•7 views

CVE-2026-0704

In affected version of Octopus Deploy it was possible to remove files and/or contents of files on the host using an API endpoint. The field lacked validation which could potentially result in ways to circumvent expected workflows...

5.9CVSS5.8AI score0.00338EPSS
SaveExploits0References1
CVE
CVE
•added 2026/02/25 12:22 p.m.•48 views

CVE-2026-0704

CVE-2026-0704 (Octopus Deploy) is described across multiple sources as a vulnerability where a lack of input validation on an API endpoint could allow removing files or their contents on the host, potentially bypassing workflows. The affected product is consistently identified as Octopus Deploy; ...

9.1CVSS5.8AI score0.00338EPSS
SaveExploits0References1Affected Software1
Positive Technologies
Positive Technologies
•added 2026/02/25 12:00 a.m.•30 views

PT-2026-21900

Name of the Vulnerable Software and Affected Versions Octopus Deploy affected versions not specified Description A lack of validation in a field within Octopus Deploy allowed for the removal of files and/or their contents on the host system via an API endpoint. This could potentially bypass...

9.1CVSS6AI score0.00338EPSS
SaveExploits0References7
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/02/25 12:00 a.m.•1 views

CVE-2026-0704: Improper Limitation of a Pathname to a Restricted Directory

In affected version of Octopus Deploy it was possible to remove files and/or contents of files on the host using an API endpoint. The field lacked validation which could potentially result in ways to circumvent expected workflows...

9.1CVSS5.8AI score0.00338EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2026/02/25 12:00 a.m.•26 views

Octopus Deploy 安全漏洞

Octopus Deploy is an automated tool developed by the Australian company Octopus, used for the development and deployment of applications in .NET, Java, and other programming languages. There is a security vulnerability in Octopus Deploy, which stems from the lack of validation in the API endpoint...

9.1CVSS5.8AI score0.00338EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2026/01/09 12:25 p.m.•17 views

CVE-2018-12884

In Octopus Deploy 3.0 onwards before 2018.6.7, an authenticated user with incorrect permissions may be able to create Accounts under the Infrastructure menu...

6.5CVSS6.6AI score0.0079EPSS
SaveExploits0References1
Rows per page
Query Builder