Browse CVEs

MEDIUM 5.9 CVE-2026-23892 OctoPrint provides a web interface for controlling consumer 3D printers. OctoPrint versions up to and including 1.11.5 are affected by a (theoretical… Octoprint 1.11.6+ Fix from $1,6002026-01-27 HIGH 8.8 CVE-2025-58180EPSS 21% OctoPrint provides a web interface for controlling consumer 3D printers. OctoPrint versions up until and including 1.11.2 contain a vulnerability tha… Octoprint 1.11.3+ Fix from $1,9502025-09-09 MEDIUM 6.5 CVE-2025-48879 OctoPrint versions up until and including 1.11.1 contain a vulnerability that allows any unauthenticated attacker to send a manipulated broken multip… Octoprint 1.11.2+ Fix from $1,6002025-06-10 MEDIUM 6.5 CVE-2024-51493 OctoPrint provides a web interface for controlling consumer 3D printers. OctoPrint versions up until and including 1.10.2 contain a vulnerability tha… Octoprint 1.10.3+ Fix from $1,6002024-11-05 MEDIUM 6.1 CVE-2024-49377 OctoPrint provides a web interface for controlling consumer 3D printers. OctoPrint versions up until and including 1.10.2 contain reflected XSS vulne… Octoprint 1.10.3+ Fix from $1,6002024-11-05 CRITICAL 9.4 CVE-2024-32977 OctoPrint provides a web interface for controlling consumer 3D printers. OctoPrint versions up until and including 1.10.0 contain a vulnerability tha… Octoprint 1.10.1+ Fix from $2,3002024-05-14 MEDIUM 6.5 CVE-2023-41047 OctoPrint is a web interface for 3D printers. OctoPrint versions up until and including 1.9.2 contain a vulnerability that allows malicious admins to… Octoprint 1.9.3+ Fix from $1,6002023-10-09 MEDIUM 6.0 CVE-2022-3607 Failure to Sanitize Special Elements into a Different Plane (Special Element Injection) in GitHub repository octoprint/octoprint prior to 1.8.3. Octoprint 1.8.3+ Fix from $1,6002022-10-19 HIGH 8.8 CVE-2022-3068 Improper Privilege Management in GitHub repository octoprint/octoprint prior to 1.8.3. Octoprint 1.8.3+ Fix from $1,9502022-09-21 MEDIUM 5.4 CVE-2022-2872 Unrestricted Upload of File with Dangerous Type in GitHub repository octoprint/octoprint prior to 1.8.3. Octoprint 1.8.3+ Fix from $1,6002022-09-21 HIGH 7.8 CVE-2022-2930 Unverified Password Change in GitHub repository octoprint/octoprint prior to 1.8.3. Octoprint 1.8.3+ Fix from $1,9502022-08-22 HIGH 7.5 CVE-2022-2822 An attacker can freely brute force username and password and can takeover any account. An attacker could easily guess user passwords and gain access … Octoprint 1.9.0+ Fix from $1,9502022-08-15 HIGH 7.5 CVE-2022-1430 Cross-site Scripting (XSS) - DOM in GitHub repository octoprint/octoprint prior to 1.8.0. Octoprint 1.8.0+ Fix from $1,9502022-05-18 MEDIUM 6.4 CVE-2022-1432 Cross-site Scripting (XSS) - Generic in GitHub repository octoprint/octoprint prior to 1.8.0. Octoprint 1.8.0+ Fix from $1,6002022-05-18 MEDIUM 6.5 CVE-2021-32560 The Logging subsystem in OctoPrint before 1.6.0 has incorrect access control because it attempts to manage files that are not *.log files. Octoprint 1.6.0+ Fix from $1,6002021-05-11 MEDIUM 6.1 CVE-2021-32561 OctoPrint before 1.6.0 allows XSS because API error messages include the values of input parameters. Octoprint 1.6.0+ Fix from $1,6002021-05-11 CRITICAL 9.1 CVE-2018-16710 OctoPrint through 1.3.9 allows remote attackers to obtain sensitive information or cause a denial of service via HTTP requests on port 8081. NOTE: th… Octoprint after 1.3.9 Fix from $2,3002018-09-07