Medium CVE-2026-4881 In affected versions of Octopus Server, permissions were not checked correctly resulting in any authenticated user being able to make server level changes using a certain API endpoint despite receiving an error. CVSS: 6.0 · CWE: CWE-862 View on NVD