CVE Feed

    Dashboard / CVE / CVE-2026-94490

    CVE-2026-94490

    ** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: In the versions that have this feature, they are an admin-gated, admin-defined, by-design shell-command feature that is not an exploitable injection.

    Published:Sep 22, 2026
    Last Modified:Oct 13, 2026
    EPS:Sep 22, 2026
    EPSS Score:0.02097
    CVSS Score:

    Affected Products

    Vendor
    Octoprint
    Product
    Octoprint

    Exploits

    No exploit reference

    Common Weakness Enumeration

    No CWE recorded yet

    Common Attack Pattern Enumeration and Classification (CAPEC)

    No CAPEC recorded yet

    Related CVEs

    CVE-2014-125135 (CVSS 6.9) — A security vulnerability has been detected in OctoPrint 1.0.0/1.1.0. Affected is an unknown function of the co…
    CVE-2013-10077 (CVSS 5.5) — A weakness has been identified in OctoPrint 1.0.0. This impacts the function getSettings of the file src/octop…
    CVE-2026-94489 — ** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its C…
    CVE-2026-54134 (CVSS 7) — OctoPrint provides a web interface for controlling consumer 3D printers. Prior to 1.11.8 and 2.0.0rc3, OctoPri…
    CVE-2026-35163 (CVSS 4.6) — OctoPrint provides a web interface for controlling consumer 3D printers. Prior to 1.11.8 and 2.0.0rc3, Suppres…
    CVE-2026-23892 (CVSS 6) — OctoPrint provides a web interface for controlling consumer 3D printers. OctoPrint versions up to and includin…
    CVE-2025-64187 (CVSS 4.6) — OctoPrint provides a web interface for controlling consumer 3D printers. Versions 1.11.3 and below are affecte…
    CVE-2025-62169 (CVSS 8.1) — OctoPrint-SpoolManager is a plugin for managing spools and all their usage metadata. In versions 1.8.0a2 and o…
    CVE-2025-58180 (CVSS 7.5) — OctoPrint provides a web interface for controlling consumer 3D printers. OctoPrint versions up until and inclu…
    CVE-2025-48879 (CVSS 6.5) — OctoPrint versions up until and including 1.11.1 contain a vulnerability that allows any unauthenticated attac…

    References

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High