HIGHCVSS v4 7.7Vulnerability
CVE-2026-105948
In affected versions of Octopus Server, incorrect validation of permissions assigned to a user that would allow them to edit their own login identities could result in that user being granted elevated permissions, up to and including system administrator access. This issue affects instances using LDAP authentication with self-service login editing enabled.
Properties
- Severity
- HIGH
- Nvd fetched at
- 2026-11-11T23:49:45.533241+00:00
- Epss score
- 0.00363
- Cvss severity
- HIGH
- Cvss score
- 7.7
- Retrieved at
- 2026-11-11T23:51:12+00:00
- Last source
- FIRST EPSS
- Score
- 7.7
- Cvss version
- 4.0
- Cve id
- CVE-2026-105948
- Cvss vector
- CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
- First seen by Signal
- 2026-11-11T11:39:15+00:00
- Name
- CVE-2026-105948
- Vector
- CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
- Published at
- 2026-11-11T08:17:16.740
- Last modified
- 2026-11-11T08:17:16.740
- Epss percentile
- 0.30519
Related Entities (1)
HAS_WEAKNESS (1)
Related research
Explore deeper with Ninja Signal's threat intelligence graph