← CVE Intelligence

CVE-2026-12702

Octopus Deploy / Octopus Server PUBLISHED

Description (CNA)

In affected versions of Octopus Deploy Insufficient checks on the project trigger actions allows an unauthorized user to trigger a deployment.

Affected (CNA)

Vendor / productVersions
Octopus Deploy / Octopus Serveraffected 2023.0.0 before 2026.1.11587; affected 2026.1.0 before 2026.1.11587; affected 2026.2.0 before 2026.2.13190

CWE

No CWE identifiers supplied.

References

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.