Advisories · Technology

Okta Access Gateway.

Every CVE that names Okta Access Gateway among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-115547 CVE record

CVSS 9.1 CriticalCritical · CVSS 9+

Command Execution via Admin Console Input in Okta Access Gateway
- Okta Access Gateway
- Code injection
- CWE-20
Not analysed yet 23 Oct 2026
CVE-2026-115546 CVE record

CVSS 8.1 High

Authentication Source Verification Issue in Okta Access Gateway
- Okta Access Gateway
- Authentication bypass
- Broken access control
Not analysed yet 23 Oct 2026
CVE-2026-78630 CVE record

CVSS 6.7 Medium

Improper Input Neutralization in Okta Access Gateway SNMP Configuration Processing
- Okta Access Gateway
- Command injection
Not analysed yet 8 Sept 2026
CVE-2026-78620 CVE record

CVSS 5.9 Medium

Improper Path Validation in Okta Access Gateway Kerberos Configuration Handling
- Okta Access Gateway
- Path traversal
Not analysed yet 8 Sept 2026
CVE-2026-78579 CVE record

CVSS 6.8 Medium

Improper Input Sanitization in Okta Access Gateway LDAP Datastore Filter Interpolation
- Okta Access Gateway
- Other injection
Not analysed yet 8 Sept 2026
CVE-2026-78626 CVE record

CVSS 8.1 High

Improper Input Sanitization in Okta Access Gateway Protected Rules
- Okta Access Gateway
- Broken access control
Not analysed yet 8 Sept 2026
CVE-2026-78625 CVE record

CVSS 6.7 Medium

Insufficient Validation of Dashboard Application Labels in Okta Access Gateway Dashboard Site Configuration
- Okta Access Gateway
- Code injection
Not analysed yet 8 Sept 2026
CVE-2026-78624 CVE record

CVSS 4.9 Medium

Improper Path Validation in Okta Access Gateway Backup and Restore Functionality
- Okta Access Gateway
- Path traversal
Not analysed yet 8 Sept 2026
CVE-2026-78560 CVE record

CVSS 4.8 Medium

Improper Authentication Validation in Okta Access Gateway Pass-Through Authentication Source
- Okta Access Gateway
- Authentication bypass
Not analysed yet 8 Sept 2026
CVE-2026-78552 CVE record

CVSS 6.0 Medium

Validation Bypass in Okta Access Gateway Custom Directives
- Okta Access Gateway
- CWE-693
Not analysed yet 8 Sept 2026
CVE-2026-78623 CVE record

CVSS 7.7 High

Improper Handling of SAML Assertion Attributes in Okta Access Gateway Advanced Mode Datastores
- Okta Access Gateway
- SQL injection
Not analysed yet 8 Sept 2026
CVE-2026-78550 CVE record

CVSS 6.6 Medium

Improper Input Handling in Okta Access Gateway Management Console Exception Handler
- Okta Access Gateway
- Code injection
Not analysed yet 8 Sept 2026
CVE-2026-78545 CVE record

CVSS 6.6 Medium

Improper Input Sanitization in Okta Access Gateway Application Label Configuration
- Okta Access Gateway
- Code injection
Not analysed yet 8 Sept 2026