Login Request a demo
OS
Product
Octopus Server
by Octopus Deploy · last CVE Oct 29, 2026
42
CVEs
0
On KEV
9.8
Max CVSS
8
New 30D
Vulnerabilities42In the news0Timeline
Severity mix
Critical 4High 15Medium 19Low 4
Severity
All severities42Critical4High15Medium19Low4
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Octopus Server to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2024-4226
3.5
0%
Apr 30
It was identified that in certain versions of Octopus Server, that a user created with no permissions could view all users, user roles and permissions
Affected: 2022.2.5205 before 2022.2.7934; 2022.3.348 before 2022.3.9163
CVE-2024-1656
2.6
0%
Sep 11
Affected versions of Octopus Server had a weak content security policy
Affected: 2018.1.0 before 2024.2.9193
CVE-2024-7998
2.6
0%
Aug 21
In affected versions of Octopus Server OIDC cookies were using the wrong expiration time which could result in them using the maximum lifespan
Affected: 2022.4.8332 before 2024.1.12931; 2024.1.437 before 2024.1.12931; 2024.2.101 before 2024.2.9313
CVE-2024-4811
2.2
0%
Jul 25
In affected versions of Octopus Server under certain conditions, a user with specific role assignments can access restricted project artifacts
Affected: 2023.1 before 2023.4.8608; 2024.1 before 2024.1.12759; 2024.2 before 2024.2.9193
Showing 4