CVE-2026-96414
UNKNOWN
NVD
CVSS Score
0
Severity
UNKNOWN
Published
Nov 11, 2026
Vendor
unknown
Description
In affected versions of Octopus Server, insufficient integrity protection of authentication cookies, combined with incorrect validation of permissions assigned to a user that allowed them to view users or audit events, could result in the user escalating their privileges to those of an Administrator.