CVE-2026-92355

In affected versions of Octopus Server, a user with permission to modify non built-in external feeds could exploit a path traversal flaw to overwrite arbitrary files on the server, which in some configurations could lead to remote code execution...

CVE-2026-92355

In affected versions of Octopus Server, a user with permission to modify non built-in external feeds could exploit a path traversal flaw to overwrite arbitrary files on the server, which in some configurations could lead to remote code execution...

CVE-2026-92355

Octopus Server is affected by a path traversal flaw in the handling of non built-in external feeds. A user with low privileges (specifically, permission to modify non built-in external feeds) can exploit this to overwrite arbitrary files on the server. In some configurations, this may escalate to...

CVE-2026-92355

In affected versions of Octopus Server, a user with permission to modify non built-in external feeds could exploit a path traversal flaw to overwrite arbitrary files on the server, which in some configurations could lead to remote code execution...

EUVD-2026-80225

In affected versions of Octopus Server, a user with permission to modify non built-in external feeds could exploit a path traversal flaw to overwrite arbitrary files on the server, which in some configurations could lead to remote code execution...

PT-2026-93337

Name of the Vulnerable Software and Affected Versions Octopus Server affected versions not specified Description A path traversal flaw exists where a user with permissions to modify non built-in external feeds can overwrite arbitrary files on the server. In certain configurations, this action cou...

CVE-2023-46748

creationtimestamp| type| source ---|---|--- 2023-10-27 00:18:13+00:00| seen| https://t.me/cibsecurity/73014 2023-10-31 21:10:02+00:00| seen| MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123 2023-11-01 09:43:20+00:00| exploited| https://t.me/itsecnews/3578 2023-11-01 10:48:35+00:00| exploited|...

CVE-2019-8526

creationtimestamp| type| source ---|---|--- 2023-04-20 14:16:36+00:00| seen| MISP/975b36ec-cae1-4663-808a-ec66730609b3 2023-06-14 21:10:04+00:00| seen| MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123 2024-12-24 20:34:15+00:00| seen| https://feedsin.space/feed/CISAKevBot/items/2971802 2025-02-23...

CVE-2023-21608

creationtimestamp| type| source ---|---|--- 2023-02-02 12:59:32+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/3747 2023-02-02 17:31:22+00:00| published-proof-of-concept| https://t.me/proxybar/1354 2023-02-02 18:05:26+00:00| published-proof-of-concept|...

CVE-2022-3236

creationtimestamp| type| source ---|---|--- 2022-09-23 16:13:26+00:00| seen| https://t.me/cibsecurity/50315 2022-09-24 07:13:55+00:00| exploited| https://t.me/thehackernews/2599 2022-09-25 11:53:57+00:00| exploited| https://t.me/secsocteam/322 2022-09-26 04:00:00+00:00| seen|...

CVE-2022-22047

creationtimestamp| type| source ---|---|--- 2022-07-12 20:46:06+00:00| seen| https://t.me/truesecator/3164 2022-07-13 04:00:00+00:00| seen| https://www.govcert.gov.hk/en/alertsdetail.php?id=833 2022-07-14 06:07:21+00:00| published-proof-of-concept| https://t.me/cKure/9958 2022-07-17 08:53:31+00:0...

CVE-2020-9907

creationtimestamp| type| source ---|---|--- 2022-06-24 19:34:31+00:00| seen| https://t.me/truesecator/3099 2023-06-14 21:10:04+00:00| seen| MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123 2023-12-04 09:32:43+00:00| seen| https://t.me/arpsyndicate/1168 2024-12-24 20:32:32+00:00| seen|...

CVE-2019-7193

creationtimestamp| type| source ---|---|--- 2022-06-13 13:29:05+00:00| seen| MISP/24c0c150-19f9-4301-87cf-6ab59dbb3c32 2023-06-14 21:10:04+00:00| seen| MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123 2024-03-07 18:37:57+00:00| seen| https://t.me/ctinow/202651 2024-11-14 06:09:59+00:00| seen|...

CVE-2019-15271

creationtimestamp| type| source ---|---|--- 2022-06-08 19:35:04+00:00| published-proof-of-concept| https://t.me/truesecator/3042 2022-06-13 09:51:24+00:00| seen| MISP/24c0c150-19f9-4301-87cf-6ab59dbb3c32 2023-06-14 21:10:04+00:00| seen| MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123 2024-02-28...

CVE-2022-24086

creationtimestamp| type| source ---|---|--- 2022-02-14 04:28:01+00:00| exploited| https://t.me/thehackernews/1883 2022-02-14 11:56:15+00:00| exploited| https://t.me/ctinow/46881 2022-02-14 15:30:00+00:00| exploited| https://t.me/truesecator/2626 2022-02-15 10:38:24+00:00| seen|...

CVE-2020-10181

creationtimestamp| type| source ---|---|--- 2021-11-08 08:58:19+00:00| seen| MISP/f5030aca-7d5a-43a4-ae03-8f4ac8e85422 2021-11-20 09:53:52+00:00| seen| MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123 2024-10-10 02:57:49+00:00| published-proof-of-concept| https://t.me/CyberSecurityTechnologies/806...

CVE-2019-16256

creationtimestamp| type| source ---|---|--- 2021-11-08 08:58:19+00:00| seen| MISP/f5030aca-7d5a-43a4-ae03-8f4ac8e85422 2021-11-20 09:53:52+00:00| seen| MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123 2023-12-04 09:36:33+00:00| seen| https://t.me/arpsyndicate/1169 2024-12-24 20:21:56+00:00| seen|...

CVE-2021-30633

creationtimestamp| type| source ---|---|--- 2021-09-14 04:00:00+00:00| seen| https://www.govcert.gov.hk/en/alertsdetail.php?id=647 2021-09-14 10:58:48+00:00| exploited| https://t.me/truesecator/2098 2021-09-14 13:18:38+00:00| exploited| https://t.me/SecLabNews/10863 2021-09-17 04:00:00+00:00| see...

CVE-2020-14883

creationtimestamp| type| source ---|---|--- 2020-11-18 21:46:12+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/http/weblogicadminhandlerce.rb 2021-01-27 04:04:05+00:00| published-proof-of-concept| https://t.me/CyberSecurityTechnologies/2004 2021-11-...

CVE-2017-11317

creationtimestamp| type| source ---|---|--- 2020-10-20 15:57:21+00:00| seen| MISP/42d04e94-bf5b-427d-acc8-f5d740675941 2020-10-20 15:58:04+00:00| seen| MISP/d925a2ee-e7cf-46f6-bec1-ad8e19122730 2020-10-20 18:32:21+00:00| seen|...