Live › vulnerability › CVE-2026-117466
Go to dashboardIn affected versions of Octopus Server, a user with the System Manager role can raise their own privileges to full system Administrator. An attacker with a System Manager account gets administrator control of the deployment server.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-27 11:31 UTC. All times on this page are UTC.
Teams running affected versions of Octopus Server where some users hold the System Manager role. Installations with no System Manager users, or already on a fixed version, are not exposed. The sources do not say whether the flaw depends on any non-default setting.
No product ranges from the sources yet.
Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
In affected versions of Octopus Server, a user holding the System Manager role could escalate their privileges to full system Administrator.
This page as .md · .json · in your agent: get_signal("CVE-2026-117466")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.