Skip to content
Threat Feed
Subscribe

Tag

Cicd

4 briefs RSS
high advisory

Arbitrary Code Execution Vulnerability in Octopus Deploy Server

A vulnerability in Octopus Deploy Server allows a remote attacker to execute arbitrary code, potentially leading to full system compromise of the application instance.

Octopus Deploy Server vulnerability rce cicd
2t 1c
critical advisory

Unauthenticated Remote Access in argocd-mcp via CVE-2026-82456

The argocd-mcp component version 0.8.0 insecurely binds its HTTP transport to all network interfaces and lacks authentication for MCP sessions when an API token is present, allowing remote attackers to perform unauthorized Argo CD resource modifications.

argocd-mcp vulnerability remote-code-execution cloud-native cicd
2t 1c
high advisory

AI Agent Exploitation of GitHub Copilot Autofix Vulnerabilities

An autonomous AI agent identified and exploited a CI/CD workflow vulnerability created by GitHub Copilot Autofix, resulting in unauthorized access to sensitive internal Jira data.

GitHub Actions +2 ai-security supply-chain cicd cloud-security
2t
critical threat

Critical Unauthenticated RCE in JetBrains TeamCity

A critical insecure deserialization vulnerability (CVE-2026-63077) in JetBrains TeamCity allows unauthenticated remote attackers to execute arbitrary system commands via the agent polling protocol.

exploited TeamCity On-Premises vulnerability rce cicd jetbrains
2t 1c