CVE-2026-118426
CVE-2026-118426
This page contains facts from public vulnerability sources. Check the original advisory before updating.
In affected versions of Octopus Server with the LDAP authentication provider enabled, any authenticated user could call the LDAP user search and LDAP group search.
CVSS 5.3 · Medium · EPSS 0.3% · Fix available
- Published
- Updated
Affected products and versions
octopus server
- Versions
- ≥ 3.0.0, < 2026.2.13487: Affected (custom)
- ≥ 2026.3.0, < 2026.3.15909: Affected (custom)
Update to 2026.2.13487; Update to 2026.3.15909