CVE-2018-16710: Octoprint

Critical severity, CVSS 9.1. EPSS: 2.1% chance of exploitation in the next 30 days.

OctoPrint through 1.3.9 allows remote attackers to obtain sensitive information or cause a denial of service via HTTP requests on port 8081. NOTE: the vendor disputes the significance of this report because their documentation states that with "blind port forwarding ... Putting OctoPrint onto the public internet is a terrible idea, and I really can't emphasize that enough.

Affected products

• Octoprint Octoprint: up to and including 1.3.9

Published 2018-09-07. Last modified 2026-06-17.