Vendor
Octopus Deploy
80 known vulnerabilities in products by Octopus Deploy, 0 of them actively exploited (CISA KEV).
Key figures
80
Vulnerabilities
0
Actively exploited (KEV)
0
Used by ransomware
5
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| Critical | CVE-2021-31819 | Octopus Deploy Halibut: Remote Code Execution | 9.8 | |
| High | CVE-2026-92355 | Octopus Server: Path Traversal | — | |
| High | CVE-2026-101169 | Octopus Server: Deserialization of Untrusted Data | — | |
| Critical | CVE-2022-2572 | Octopus Server: security vulnerability | 9.8 | |
| High | CVE-2026-12878 | Octopus Deploy Codefresh: security vulnerability | 8.8 | |
| Critical | CVE-2022-2778 | Octopus Server: security vulnerability | 9.8 | |
| High | CVE-2026-102478 | Octopus Server: Improper Validation of Unsafe Equivalence in Input | — | |
| High | CVE-2026-116870 | Octopus Server: Improper Validation of Unsafe Equivalence in Input | — | |
| High | CVE-2026-91778 | Octopus Server: Incorrect Authorization | — | |
| High | CVE-2026-117466 | Octopus Server: Improper Privilege Management | — | |
| High | CVE-2026-102488 | Octopus Server: Incorrect Authorization | — | |
| High | CVE-2022-2883 | Octopus Server: Denial of Service | 7.5 | |
| High | CVE-2026-117341 | Octopus Server: Insertion of Sensitive Information into Log File | — | |
| High | CVE-2026-14163 | Octopus Server: security vulnerability | 7.5 | |
| High | CVE-2022-4009 | Octopus Server: security vulnerability | 8.8 | |
| Critical | CVE-2026-0704 | Octopus Server: security vulnerability | 9.1 | |
| Critical | CVE-2022-2782 | Octopus Server: security vulnerability | 9.1 | |
| High | CVE-2026-78210 | Octopus Server: Incorrect Authorization | — | |
| High | CVE-2022-2013 | Octopus Server: security vulnerability | 7.5 | |
| High | CVE-2022-2074 | Octopus Server: Denial of Service | 7.5 | |
| High | CVE-2022-1670 | Octopus Server: security vulnerability | 7.5 | |
| High | CVE-2021-31817 | Octopus Server: security vulnerability | 7.5 | |
| High | CVE-2021-31816 | Octopus Server: security vulnerability | 7.5 | |
| High | CVE-2022-2075 | Octopus Server: Denial of Service | 7.5 | |
| High | CVE-2022-2049 | Octopus Server: Denial of Service | 7.5 |
Products
| Octopus Server | 73 | 0 |
| Octopus Deploy Server | 8 | 0 |
| Octopus Deploy | 6 | 0 |
| Octopus Tentacle | 4 | 0 |