CVE-2026-78210 — Octopus Deploy / Octopus Server

CVE-2026-78210

Octopus Deploy / Octopus Server PUBLISHED

Description (CNA)

In affected versions of Octopus Server, users with certain scoped permission sets could execute arbitrary scripts in an environment without possessing the required authorization.

Affected (CNA)

Vendor / product	Versions
Octopus Deploy / Octopus Server	affected 2019.5.9 before 2026.1.11739; affected 2026.2.0 before 2026.2.13364; affected 2026.3.0 before 2026.3.13951

CWE

CWE-863

References

https://advisories.octopus.com/post/2026/sa2026-13

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.