CVE-2026-123364 | OctoPrint up to 2.0.0rc6 Serial Connector plugin port/baudrate cross site scripting

A vulnerability marked as problematic has been reported in OctoPrint up to 2.0.0rc6. This affects an unknown function of the component Serial Connector plugin. The manipulation of the argument port/baudrate leads to cross site scripting.

This vulnerability is traded as CVE-2026-123364. It is possible to initiate the attack remotely. There is no exploit available.

It is suggested to upgrade the affected component.VulDB Recent EntriesRead More