CVE-2026-14163

概要

参考情報

• advisories.octopus.com/post/2026/sa2026-07 · Vendor Advisory

octopus server のその他の脆弱性

• CVE-2026-12702中 4.9In affected versions of Octopus Deploy Insufficient checks on the project trigger actions allows an unauthorized user to trigger a deploymen…
• CVE-2026-4881中 6.5In affected versions of Octopus Server, permissions were not checked correctly resulting in any authenticated user being able to make server…
• CVE-2026-3237中 4.3In affected versions of Octopus Server it was possible for a low privileged user to manipulate an API request to change the signing key expi…
• CVE-2026-3236中 4.3In affected versions of Octopus Server it was possible to create a new API key from an existing access token resulting in the new API key ha…
• CVE-2026-0704緊急 9.1In affected version of Octopus Deploy it was possible to remove files and/or contents of files on the host using an API endpoint. The field …