Okta Okta Privileged Access Client
2 CVEs affecting Okta Okta Privileged Access Client. Latest disclosed: 2026-09-08. Critical: 0, High: 0.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2026-77585 | Medium | 5.3 | 2026-08-25 | The Okta Privileged Access client does not reject a leading hyphen in the username portion of an SSH target. As a result, the value may be interpreted as a com… |
CVE-2026-78635 | Medium | 5.0 | 2026-09-08 | The Okta Privileged Access client URL handler does not insert an option terminator before appending the target value to the command-line arguments. When a scal… |