Vulnerability Intelligence Report
CVE-2026-117466
In affected versions of Octopus Server, a user holding the System Manager role could escalate their privileges to full system Administrator.
Privilege Escalation
No Active Exploit Signals
CVSS Base Score
8.6
HIGH
Executive Threat Verdict
Evaluating...
Evaluating Threat Landscape...
Assessing known weaponization, exploitation telemetry, and federal advisories.
Attack Surface
—
Authentication
—
Weaponization
—
SSVC Action
—
Weaknesses (CWE)
CWE-269 ↗CWE-269: Improper Privilege Management
Affected Products & Versions
| Vendor | Product | Affected Versions |
|---|---|---|
| Octopus Deploy | Octopus Server | 2019.0.0 < 2026.2.13469 (affected), 2026.3.0 < 2026.3.15863 (affected) |
References & Technical Advisories
No reference links found.
Threat Intelligence Signals
GitHub Advisory
Vulnerability Class
Privilege Escalation
Identity & Timeline
| Status | PUBLISHED |
| Assigning Authority | Octopus Deploy · Vendor · Australia |
| Reserved | 2026-10-27T05:16:33 |
| Published | 2026-10-27T10:40:49 |
| Last Updated | 2026-10-27T10:40:49 |
Community Chatter & Buzz