Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

Octopus Server — Vulnerabilities & Security Advisories 77

All 77 CVE vulnerabilities found in Octopus Server, with AI-generated Chinese analysis, references, and POCs.

This page aggregates known security weaknesses and related advisories for Octopus Server, a continuous deployment platform developed by Octopus Deploy. The collection encompasses a wide spectrum of vulnerability classes, including remote code execution, privilege escalation, and information disclosure issues, covering the product's entire public release history from its initial launch to the most recent stable versions. Visitors can utilize this resource to track official vendor advisories, analyze the prevalence and impact of specific weakness categories within the deployment ecosystem, or review the complete historical vulnerability record for Octopus Server to inform security assessments and patch management strategies. By consolidating data from multiple authoritative sources, this index provides a centralized view of the platform's security posture without requiring users to navigate disparate databases or unstructured reports. The information presented focuses strictly on technical details, affected versions, and remediation guidance, ensuring that security professionals and system administrators can efficiently identify risks and prioritize corrective actions for their environments. This comprehensive aggregation supports ongoing security monitoring efforts and aids in the development of robust defense-in-depth strategies for organizations relying on Octopus Server for their deployment pipelines.

Vendor: Octopus Deploy

CVE ID Title CVSS Severity Published
CVE-2026-105948 Octopus Server 身份验证绕过漏洞 CWE-863 7.7 High 2026-11-11
CVE-2026-93487 Octopus Server 任意版本权限绕过漏洞 CWE-863 7.1 High 2026-11-11
CVE-2026-96414 Octopus Server 认证 Cookie 完整性缺陷致权限提升 CWE-649 8.7 High 2026-11-11
CVE-2026-118426 Octopus Server LDAP 认证启用时任意用户可搜索用户与组 CWE-862 5.3 Medium 2026-10-29
CVE-2026-12887 Octopus Server 任意版本恶意 NuGet 包目录遍历漏洞 5.1 Medium 2026-10-27
CVE-2026-117466 Octopus Server 任意版本存在权限提升漏洞 CWE-269 8.6 High 2026-10-27
CVE-2026-117341 Octopus Server 多版本审计日志泄露导致权限提升漏洞 CWE-532 7.7 High 2026-10-27
CVE-2026-116870 Octopus Server OIDC 令牌签发者验证不一致漏洞 CWE-1289 8.7 High 2026-10-27
CVE-2026-102488 Octopus Server权限评估错误致提权 CWE-863 8.7 High 2026-10-08
CVE-2026-102478 Octopus Server角色权限绕过致提权 CWE-1289 8.7 High 2026-10-07
CVE-2026-78210 Octopus Server越权执行任意脚本漏洞 CWE-863 7.1 High 2026-10-01
CVE-2026-101169 Octopus Server 反序列化漏洞可致任意代码执行 CWE-502 8.7 High 2026-09-29
CVE-2026-92355 Octopus Server路径遍历致远程代码执行漏洞 CWE-22 8.7 High 2026-09-16
CVE-2026-91778 Octopus Server 特定版本脚本执行权限验证缺陷 CWE-863 7.2 High 2026-09-15
CVE-2026-14163 Octopus Deploy Octopus Server 安全漏洞 7.1 High 2026-08-20
CVE-2026-12702 Octopus Deploy Octopus Server 安全漏洞 5.1 Medium 2026-07-24
CVE-2026-8296 Octopus Server 安全漏洞 - - 2026-06-19
CVE-2026-4881 Octopus Server 安全漏洞 - - 2026-06-04
CVE-2026-3237 Octopus Server 安全漏洞 4.3AI Medium AI 2026-03-17
CVE-2026-3236 Octopus Server 安全漏洞 CWE-863 7.5 - 2026-03-05
CVE-2026-0704 Octopus Deploy 安全漏洞 6.5AI Medium AI 2026-02-25
CVE-2025-0539 Octopus Deploy 安全漏洞 10.0AI Critical AI 2025-04-10
CVE-2025-0588 Octopus Server 安全漏洞 7.3 - 2025-02-11
CVE-2025-0513 Octopus Server 安全漏洞 6.1 - 2025-02-11
CVE-2025-0526 Octopus Server 安全漏洞 6.5 - 2025-02-11
CVE-2025-0525 Octopus Server 安全漏洞 5.3 - 2025-02-11
CVE-2025-0589 Octopus Server 安全漏洞 5.3 - 2025-02-11
CVE-2024-9194 SQL Injection in the Octopus Server REST API CWE-89 9.8 - 2024-09-30
CVE-2024-1656 Octopus Server 安全漏洞 2.6 Low 2024-09-11
CVE-2024-7998 Octopus Server 安全漏洞 2.6 Low 2024-08-21

All 77 known CVE vulnerabilities affecting Octopus Server with full Chinese analysis, references, and POCs where available.