OctoPrint OctoPrint

• CVE-2026-54134 High 7.0 OctoPrint: File exfiltration possible via query parameters on upload endpoints 0.3%
• CVE-2026-35163 Medium 4.6 OctoPrint: XSS in Suppressed Command Notifications 0.2%
• CVE-2026-23892 Medium 6.0 OctoPrint has Timing Side-Channel Vulnerability in API Key Authentication 0.4%
• CVE-2025-64187 Medium 4.6 OctoPrint is vulnerable to XSS through Action Command Notifications and Prompts 0.2%
• CVE-2025-58180 High 7.5 OctoPrint is Vulnerable to RCE Attacks via Unsanitized Filename in File Upload 22.1%
• CVE-2025-48879 Medium 6.5 OctoPrint Vulnerable to Denial of Service through malformed HTTP request 0.3%
• CVE-2025-48067 Medium 5.4 OctoPrint vulnerable to possible file extraction via upload endpoints 0.3%
• CVE-2025-32788 Medium 4.3 OctoPrint Authenticated Reverse Proxy Page Authentication Bypass 0.2%
• CVE-2024-49377 Medium 5.5 Jinja2 Templates are vulnerable to XSS attacks due to their configuration in OctoPrint 0.3%
• CVE-2024-51493 Medium 5.3 API key access in settings without reauthentication in OctoPrint 0.3%
• CVE-2024-32977 High 7.1 OctoPrint Authentication Bypass via X-Forwarded-For Header when autologinLocal is enabled 0.9%
• CVE-2024-28237 Medium 4.0 OctoPrint XSS via the "Snapshot Test" feature in Classic Webcam plugin settings 0.4%
• CVE-2024-23637 Medium 4.2 OctoPrint Unverified Password Change via Access Control Settings 0.5%
• CVE-2023-41047 Medium 6.2 Improper Neutralization of Special Elements Used in a Template Engine in OctoPrint 0.6%