CVE-2026-105948

In affected versions of Octopus Server, incorrect validation of permissions assigned to a user that would allow them to edit their own login identities could result in that user being granted elevated permissions, up to and including system administrator access. This issue affects instances using...

CVE-2026-105948

In affected versions of Octopus Server , an incorrect validation of permissions allows users to edit their own login identities. This flaw can lead to privilege escalation , potentially granting the user system administrator access . The vulnerability specifically impacts instances utilizing LDAP...

EUVD-2026-123273

In affected versions of Octopus Server, incorrect validation of permissions assigned to a user that would allow them to edit their own login identities could result in that user being granted elevated permissions, up to and including system administrator access. This issue affects instances using...

CVE-2026-105948: Octopus Deploy Octopus Server: In affected versions of Octopus Server, incorrect validation of permissions assigned to a user that would allow them to…

In affected versions of Octopus Server, incorrect validation of permissions assigned to a user that would allow them to edit their own login identities could result in that user being granted elevated permissions, up to and including system administrator access. This issue affects instances using...

CVE-2026-117466

In affected versions of Octopus Server, a user holding the System Manager role could escalate their privileges to full system Administrator...

PT-2026-126355

In affected versions of Octopus Server, a user holding the System Manager role could escalate their privileges to full system Administrator...

Octopus Deploy Octopus Server permission and access control issue vulnerability

In Octopus Deploy Octopus Server versions from 2019.0.0 up to and including 2026.2.13469, as well as from 2026.3.0 up to and including 2026.3.15863, there is a vulnerability related to permission escalation and access control. This vulnerability stems from improper permission management; users wi...

CVE-2026-93848 Mattermost OpenID discovery endpoint request bypasses outbound connection filtering, allowing SSRF by a System Administrator

Mattermost versions 11.7.x = 11.7.10 fail to apply outbound internal-connection filtering to the OpenID discovery endpoint request which allows a System Administrator to determine whether internal addresses and ports are reachable from the server via an unauthenticated login request that triggers...

CVE-2026-93848 Mattermost OpenID discovery endpoint request bypasses outbound connection filtering, allowing SSRF by a System Administrator

Mattermost versions 11.7.x = 11.7.10 fail to apply outbound internal-connection filtering to the OpenID discovery endpoint request which allows a System Administrator to determine whether internal addresses and ports are reachable from the server via an unauthenticated login request that triggers...

CVE-2026-93848

Mattermost versions 11.7.x

CVE-2026-102142

A system notification template on the Kiteworks appliance was rendered by a template engine that evaluated expressions contained in the stored template body. An authenticated System Administrator could potentially store a crafted template that executed operating-system commands on the appliance...

CVE-2026-102117

On deployments where the remote-support capability is licensed and enabled, an authenticated System Administrator who also possessed the key protecting the submitted data could redirect the underlying system's outbound support connection to a destination of their choosing. That destination could...

CVE-2026-102117 Kiteworks Core Remote Code Execution

On deployments where the remote-support capability is licensed and enabled, an authenticated System Administrator who also possessed the key protecting the submitted data could redirect the underlying system's outbound support connection to a destination of their choosing. That destination could...

EUVD-2026-90302

On deployments where the remote-support capability is licensed and enabled, an authenticated System Administrator who also possessed the key protecting the submitted data could redirect the underlying system's outbound support connection to a destination of their choosing. That destination could...

CVE-2026-102117

The Kiteworks Core platform is vulnerable to Remote Code Execution (RCE) when the remote-support capability is licensed and enabled. An authenticated System Administrator who possesses the key protecting the submitted data can redirect the system's outbound support connection to a destination of ...

CVE-2026-102126 Kiteworks Core Stored Cross-site Scripting (XSS)

A stored cross-site scripting XSS weakness in Kiteworks Core could allow an administrator holding only a single, narrowly scoped delegated permission to store crafted content that later executes arbitrary JavaScript in the authenticated session of a System Administrator who views the affected pag...

CVE-2026-102129

A privilege escalation vulnerability exists in the user-provisioning interface of Kiteworks Core . The root cause is a failure to verify if the requesting administrator possesses the authorization required to grant specific roles. Consequently, an administrator with limited permissions for role c...

CVE-2026-102129 Kiteworks Core Incorrect Privilege Assignment

A user-provisioning interface in Kiteworks Core did not verify that the requesting administrator was entitled to grant the role being assigned. An administrator whose delegated permissions covered role changes alone could therefore raise an account to full system-administrator privileges...

CVE-2026-102129 Kiteworks Core Incorrect Privilege Assignment

A user-provisioning interface in Kiteworks Core did not verify that the requesting administrator was entitled to grant the role being assigned. An administrator whose delegated permissions covered role changes alone could therefore raise an account to full system-administrator privileges...

EUVD-2026-90284

An optional, separately licensed repository-connector feature in Kiteworks Core did not neutralize special characters in a user-supplied path before passing it to an external command. An authenticated system administrator could inject additional commands and write arbitrary content to files owned...