Known Vulnerabilities for Server by Octopus
Listed below are 10 of the newest known vulnerabilities associated with "Server" by "Octopus".
These CVEs are retrieved based on exact matches on listed software, hardware, and vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed software information are still displayed.
Data on known vulnerable versions is also displayed based on information from known CPEs
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2026-77085 json | n8n before 2.34.1 and 2.33.x before 2.33.4 contains an SSRF protection bypass in the SearXNG Agent tool. The tool sent reques... | Not Provided | 2026-08-20 | 2026-08-20 |
| CVE-2026-77074 json | n8n versions before 1.123.69 contain a server-side request forgery vulnerability in the Edit Image node's Draw Text operation... | Not Provided | 2026-08-20 | 2026-08-20 |
| CVE-2026-77070 json | n8n before 1.123.69, 2.33.4, and 2.34.1 contains a NoSQL injection vulnerability in the MongoDB node's Find, Delete, and Aggr... | Not Provided | 2026-08-20 | 2026-08-20 |
| CVE-2026-77067 json | The setWebhookResolver in packages/api/src/resolvers/webhooks/index.ts stores the caller-supplied url without any address val... | Not Provided | 2026-08-20 | 2026-08-20 |
| CVE-2026-77066 json | The scanFeedsResolver in packages/api/src/resolvers/subscriptions/index.ts passes the caller-supplied url straight to axios.g... | Not Provided | 2026-08-20 | 2026-08-20 |
| CVE-2026-76850 json | LMDeploy deserializes disaggregated-serving peer messages with pickle. The handle_zmq_recv coroutine in lmdeploy/pytorch/disa... | Not Provided | 2026-08-19 | 2026-08-20 |
| CVE-2026-76795 json | A vulnerability has been found in AeternaLabsHQ PullMD 3.2.0. This impacts an unknown function of the file /api of the compon... | Not Provided | 2026-08-20 | 2026-08-20 |
| CVE-2026-76614 json | OpenEMR before 8.3.0 contains a path traversal vulnerability in the EDI archive restore function. The archrestore_sel POST pa... | Not Provided | 2026-08-19 | 2026-08-19 |
| CVE-2026-76404 json | In Splunk MCP Server app versions below 1.2.1, a user who holds the "admin" Splunk role could execute arbitrary commands on t... | Not Provided | 2026-08-19 | 2026-08-19 |
| CVE-2026-76402 json | In Splunk Connect for Kafka versions below 2.2.7, an unauthenticated user who can reach the Kafka Connect Representational St... | Not Provided | 2026-08-19 | 2026-08-19 |