CVE-2026-12878 | Octopus Deploy Codefresh up to 2.11.14 API Endpoint permission

August 25, 2026 Yanac

A vulnerability marked as critical has been reported in Octopus Deploy Codefresh up to 2.11.14. Impacted is an unknown function of the component API Endpoint. This manipulation causes permission issues.

This vulnerability appears as CVE-2026-12878. The attack may be initiated remotely. There is no available exploit.

It is suggested to upgrade the affected component.VulDB Recent EntriesRead More