{"id":"CVE-2026-93487","published":"2026-11-11T08:17:19.213","lastModified":"2026-11-11T08:17:19.213","description":"In affected versions of Octopus Server, incorrect validation of the permissions assigned to a user that would allow them to create project triggers could result in the user being able to run runbooks or create deployments they were not authorised to perform.","cvssScore":null,"cvssSeverity":null,"cvssVector":null,"cwes":["CWE-863"],"vendors":[],"products":[],"references":[{"url":"https://advisories.octopus.com/post/2026/sa2026-20","tags":[]}],"exploitRefs":[],"hasPoc":false,"ai":null}