Octopus Codefresh — known CVE vulnerabilities

Every CVE whose affected-product data names Octopus Codefresh, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (1)

• CVE-2026-12878 — CVSS 8.8 (high): In affected versions of the Codefresh platform an authenticated user can utilize an API endpoint to elevate to Admin permissions.