Ocelot vulnerabilities

1 known vulnerability in Ocelot from ThreeMammals. 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 9.1 Critical severity

  Ocelot: Authentication Bypass Using an Alternate Path or Channel

  CVE-2026-58172Jun 30, 2026ThreeMammals

  Ocelot through 24.1.0, fixed in commit f156fd4, contains a security control bypass vulnerability that allows denied clients to circumvent IP-based access restrictions by sending WebSocket upgrade requests. The WebSocket upgrade pipeline branch configured via M