Okta Access Gateway
12 CVEs affecting Okta Access Gateway. Latest disclosed: 2026-09-08. Critical: 0, High: 2.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2026-78626 | High | 8.1 | 2026-09-08 | The Okta Access Gateway improperly handles input sanitization and regular expression evaluation within its Protected Rule authorization check, resulting in an… |
CVE-2026-78623 | High | 7.7 | 2026-09-08 | The Okta Access Gateway does not sanitize SAML assertion values before interpolating them into database queries in the advanced mode datastore configuration. T… |
CVE-2026-78579 | Medium | 6.8 | 2026-09-08 | The Okta Access Gateway does not sanitize SAML assertion attribute values before interpolating them into LDAP search filters in the LDAP datastore configuratio… |
CVE-2026-78630 | Medium | 6.7 | 2026-09-08 | The Okta Access Gateway does not neutralize shell metacharacters in SNMP configuration values before a privileged script uses them to construct OS commands. An… |
CVE-2026-78625 | Medium | 6.7 | 2026-09-08 | The Okta Access Gateway does not sanitize dashboard label values before writing them into generated PHP configuration files. The generated file is automaticall… |
CVE-2021-28113 | Medium | 6.7 | 2021-04-02 | A command injection vulnerability in the cookieDomain and relayDomain parameters of Okta Access Gateway before 2020.9.3 allows attackers (with admin access to… |
CVE-2026-78550 | Medium | 6.6 | 2026-09-08 | The Okta Access Gateway management console passes user-supplied input to eval() without sanitization during an authenticated administrator SSH session. As a re… |
CVE-2026-78545 | Medium | 6.6 | 2026-09-08 | The Okta Access Gateway does not sanitize the application label field before including it in the generated nginx configuration file. The unsanitized value is i… |
CVE-2026-78552 | Medium | 6.0 | 2026-09-08 | The Okta Access Gateway does not apply its Lua directive restriction to the application-level custom configuration field. The field is interpolated directly in… |
CVE-2026-78620 | Medium | 5.9 | 2026-09-08 | The Okta Access Gateway Kerberos configuration handler does not validate file paths specified in event payloads before writing file contents. The path from the… |
CVE-2026-78624 | Medium | 4.9 | 2026-09-08 | The Okta Access Gateway backup restore function does not validate the filename embedded in an encrypted backup payload. This results in writing file contents t… |
CVE-2026-78560 | Medium | 4.8 | 2026-09-08 | The Okta Access Gateway includes an optional pass-through authentication source that accepts user identity from a client-supplied HTTP header without cryptogra… |