CVE-2026-46552: Improper Authorization

NocoDB is software for building databases as spreadsheets. Prior to 2026.04.1, shared-base sessions were granted the same base-member capabilities as authenticated viewers. Using only the shared-base UUID xc-shared-base-id, an attacker could enumerate base members and invite an arbitrary email in...

Octopus Deploy Privilege Escalation Vulnerability

In Octopus, an authenticated user who was explicitly granted the permission to invite new users aka UserInvite can invite users to teams with escalated privileges. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by...

CVE-2017-15611

CVE-2017-15611 affects Octopus Deploy prior to 3.17.7. An authenticated user with the explicit UserInvite permission can invite users to teams with escalated privileges, enabling privilege escalation within the deployment platform. The vulnerability is documented across multiple sources (NVD entr...