Octopus Deploy

Records118All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical5CVSS 9.0–10.0

CVSS high43CVSS 7.0–8.9

Exploited now

Octopus Deploy records in CISA KEV

No Octopus Deploy vulnerabilities are listed in CISA KEV.

Products in the NVD configurations · select one to filter the records

1 record in Codefresh · all components

TI-2026-10982 CVE-2026-12878 · GHSA-5g9x-76r7-xgp8

MEDIUM 40

In affected versions of the Codefresh platform an authenticated user can utilize an API endpoint to elevate to Admin permissions.

CVSS 4.0HIGH 8.6 Network High privileges No interaction EPSS 0.00423 Published 2026-08-25 Fixed in 2.11.15 CWE-269