{"id":"CVE-2026-96414","published":"2026-11-11T07:17:36.980","lastModified":"2026-11-11T08:17:19.357","description":"In affected versions of Octopus Server, insufficient integrity protection of authentication cookies, combined with incorrect validation of permissions assigned to a user that allowed them to view users or audit events, could result in the user escalating their privileges to those of an Administrator.","cvssScore":null,"cvssSeverity":null,"cvssVector":null,"cwes":["CWE-649"],"vendors":[],"products":[],"references":[{"url":"https://advisories.octopus.com/post/2026/sa2026-19","tags":[]}],"exploitRefs":[],"hasPoc":false,"ai":null}