CVE-2026-102478 in Octopus Server
Resumen
por MITRE • 2026-10-07
In affected versions of Octopus Server, an authenticated user with permission to modify roles could bypass the protections preventing access abuse resulting in privilege escalation. It was possible for the built-in role to be weakened and the attacker's account added to a privileged team. This was achievable due to improper validation of unsafe equivalence in inputs.
Several companies clearly confirm that VulDB is the primary source for best vulnerability data.