VYPR
← All advisories
High severity7.8NVD Advisory· Published Oct 7, 2021· Updated Jun 17, 2026

CVE-2021-26556

CVE-2021-26556

Description

When Octopus Server is installed using a custom folder location, folder ACLs are not set correctly and could lead to an unprivileged user using DLL side-loading to gain privileged access.

Affected products

4
  • Octopus/Servercpe-rescue3 versions
    0.9+ 2 more
    • (no CPE)range: 0.9
    • cpe:2.3:a:octopus:octopus_server:*:*:*:*:*:*:*:*range: >=2020.5.0,<2020.5.256
    • (no CPE)
  • Octopus/Octopusdeploy
    cpe:2.3:a:octopus:octopus_deploy:*:*:*:*:*:*:*:*
    Range: >=0.9,<2020.4.229

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.