CVE-2026-123364

In OctoPrint versions 2.0.0rc1 through 2.0.0rc7 , an authenticated user can exploit a vulnerability in the bundled Serial Connector plugin . By supplying a crafted default port or baudrate via a connect request, an attacker can cause the application to persist these values and render them as HTML...