---
id: CVE-2026-94489
title: 'Rejected reason: ** REJECT ** DO NOT USE THIS CANDIDATE NUMBER'
summary: >-
  Rejected reason: ** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs:
  none. Reason: This candidate was withdrawn by its CNA. Further investigation
  showed that it was not a security issue. Notes: The exact code first shipped
  in 1.6.…
severity: medium
cvss: 4.3
cvssVector: 'CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N'
cwe:
  - CWE-22
product: OctoPrint
affected:
  - OctoPrint 1.0.0
published: '2026-09-22'
updated: '2026-10-13'
sourceUpdated: '2026-10-13T16:17:24.033'
source: NVD
sourceUrl: 'https://nvd.nist.gov/vuln/detail/CVE-2026-94489'
references:
  - url: 'https://vuldb.com/cve/CVE-2026-94489'
    label: cna@vuldb.com
  - url: 'https://vuldb.com/submit/895338'
    label: cna@vuldb.com
  - url: 'https://vuldb.com/vuln/408189'
    label: cna@vuldb.com
  - url: 'https://vuldb.com/vuln/408189/cti'
    label: cna@vuldb.com
tags:
  - nvd
  - cve.org
  - exploit-available
epss: 0.00517
epssPercentile: 0.42404
exploitAvailable: true
ssvc:
  exploitation: poc
  automatable: 'no'
  technicalImpact: partial
  timestamp: '2026-09-22T13:23:59.303161Z'
cvssSource: nvd
ingestedAt: '2026-09-21T23:55:16.587Z'
---

## Overview

Rejected reason: ** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: The exact code first shipped in 1.6.0, does not exist in the cited 1.0.0, and in every version where it exists the claimed missing protection is already implemented.

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.