OCTOBER 13, 2026
Live Feed
Back to database
Case File

CVE-2026-92355

HIGH · CVSS 8.7 EPSS 0.69% Public Exploit

Source: NVD + CISA KEV + EPSS · Published 2026-09-16 · Last synced 2026-10-13

CyberRota Analysis

AI-Generated

A path traversal vulnerability in Octopus Server allows users with permission to modify non built-in external feeds to overwrite arbitrary files on the server. This flaw could potentially lead to remote code execution in certain configurations, posing a significant risk. Organizations using Octopus Server should prioritize patching this vulnerability to mitigate the threat of exploitation.

Public Exploit Signal

A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.

Detected Signals
exploit remote code execution code execution

Note: these links are listed for security research and verification purposes only.

CVE
CVE-2026-92355
Severity
HIGH
CVSS
8.7
EPSS
0.69%

Original NVD Description

In affected versions of Octopus Server, a user with permission to modify non built-in external feeds could exploit a path traversal flaw to overwrite arbitrary files on the server, which in some configurations could lead to remote code execution.