Medium
5.3
In affected versions of Octopus Server with the LDAP authentication provider enabled, any...
CVE-2026-118426
First seen on SecPulse
Affected packages
| Ecosystem | Package | Affected | Fixed |
|---|---|---|---|
| Octopus Deploy | Octopus Server |
≥ 3.0.0, < 2026.2.13487 ≥ 2026.3.0, < 2026.3.15909 |
2026.2.13487 2026.3.15909 |
Original description The description as published by the source.
In affected versions of Octopus Server with the LDAP authentication provider enabled, any authenticated user could call the LDAP user search and LDAP group search.
Source: CVE.org (CVE Program・cvelistV5) NVD GitHub Advisory
References
- web advisories.octopus.com
- web nvd.nist.gov
- web github.com