← CVE Intelligence

CVE-2026-8296

Octopus Deploy / Octopus Server PUBLISHED

Description (CNA)

In affected versions of Octopus Server with certain access levels it was possible to embed a Cross-Site Scripting Payload via artifacts.

Affected (CNA)

Vendor / productVersions
Octopus Deploy / Octopus Serveraffected 2023.0.0 before 2025.4.10678; affected 2026.1.0 before 2026.1.11451; affected 2026.2.0 before 2026.2.13114

CWE

No CWE identifiers supplied.

References

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.