CVE-2026-8296

MediumCVSS 5.6

Published: 19/06/2026(UTC)Updated: 22/06/2026(UTC)Translated: 23/06/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.20%

10th percentile — higher than 10% of all known CVEs

In affected versions of Octopus Server with certain access levels it was possible to embed a Cross-Site Scripting Payload via artifacts.

An attacker could exploit this vulnerability to inject malicious scripts, potentially leading to data theft or session hijacking.

It is recommended to update Octopus Server to the latest version and review access levels to minimize the risk of malicious code injection.

Original NVD description (English source)

In affected versions of Octopus Server with certain access levels it was possible to embed a Cross-Site Scripting Payload via artifacts.