CVE-2026-923558.7HighCWE-22
Octopus Deploy Octopus Server vulnerability
Octopus Deploy · Octopus Server
Not in CISA KEVVendor fix available
0.7%probability of exploitation in the next 30 days
52nd percentile
050100
Higher than 52% of scored CVEs
8.7HighCVSS 4.0
LowMediumHighCrit.
DescriptionNVD
In affected versions of Octopus Server, a user with permission to modify non built-in external feeds could exploit a path traversal flaw to overwrite arbitrary files on the server, which in some configurations could lead to remote code execution.
Coverage1 article · 1 outlet
First in our coverage: SecurityOnline, 16 Sep.
- Octopus Deploy Fixes Flaws That Could Enable Remote Code ExecutionSecurityOnline · first in our coverage · mentions it in passing
New articles also arrive in the RSS feed.